type=USER_END msg=audit(1764926665.182:56020): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926665.183:56021): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926665.196:56022): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926665.196:56023): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926665.198:56024): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438467 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926665.226:56025): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926665.226:56026): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926665.237:56027): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926665.238:56028): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926665.239:56029): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438481 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926665.301:56030): pid=438497 uid=1000 auid=1000 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926665.301:56031): pid=438497 uid=1000 auid=1000 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766470626F6978766F637475787669716D647477616F656C6671767071676C75203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363636342E3933313336342D3432382D3138313833333339393834393238392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926665.302:56032): pid=438497 uid=1000 auid=1000 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926665.306:56033): pid=438497 uid=1000 auid=1000 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926665.520:56034): pid=438497 uid=1000 auid=1000 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926665.520:56035): pid=438497 uid=1000 auid=1000 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926665.524:56036): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926665.524:56037): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926665.537:56038): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926665.537:56039): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926665.538:56040): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438500 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926665.563:56041): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926665.563:56042): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926666.461:56043): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=436572 suid=1000 rport=44730 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926666.461:56044): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=436572 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926666.463:56045): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1764926666.464:56046): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926666.464:56047): pid=436545 uid=0 auid=1000 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=436545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764926667.403:56048): pid=438515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926667.441:56049): pid=438514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=438515 suid=74 rport=33629 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926667.442:56050): pid=438514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=438515 suid=74 rport=33629 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926667.742:56051): pid=438514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=438515 suid=74 rport=33629 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926667.743:56052): pid=438514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438515 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926667.744:56053): pid=438514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=12.189.234.28 addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926667.744:56054): pid=438514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926667.744:56055): pid=438514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926670.732:56056): pid=438517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926670.739:56057): pid=438516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=438517 suid=74 rport=36106 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926670.740:56058): pid=438516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=438517 suid=74 rport=36106 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1764926670.863:56059): pid=438516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926670.863:56060): pid=438516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5d:f5:28:43:c1:ce:d9:fe:fd:db:bd:89:9e:0e:5e:69:1c:b2:7e:10:3c:5c:36:4b:50:86:57:31:8b:3e:6d:e5 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764926670.892:56061): pid=438516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926670.892:56062): pid=438516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=438517 suid=74 rport=36106 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1764926670.894:56063): pid=438516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764926670.895:56064): pid=438516 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=239 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1764926670.895:56064): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdf8467660 a2=4 a3=3e8 items=0 ppid=410121 pid=438516 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=239 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764926670.895:56064): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1764926670.896:56065): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1764926670.937:56066): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926670.938:56067): pid=438519 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1764926670.939:56068): pid=438519 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1764926670.982:56069): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926670.982:56070): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926670.983:56071): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438520 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926671.013:56072): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926671.013:56073): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926671.029:56074): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926671.029:56075): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926671.030:56076): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438533 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926671.096:56077): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926671.096:56078): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926671.337:56079): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926671.338:56080): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926671.339:56081): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438552 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926671.368:56082): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926671.368:56083): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926671.398:56084): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926671.398:56085): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926671.400:56086): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438566 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926671.466:56087): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926671.466:56088): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926671.490:56089): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926671.490:56090): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926671.492:56091): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438579 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926671.523:56092): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926671.523:56093): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926671.536:56094): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926671.537:56095): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926671.538:56096): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438593 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926672.126:56097): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926672.126:56098): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926672.142:56099): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926672.142:56100): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926672.144:56101): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438614 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926672.169:56102): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926672.169:56103): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926673.359:56104): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926673.359:56105): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926673.361:56106): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438628 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926673.390:56107): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926673.391:56108): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926673.402:56109): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926673.403:56110): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926673.404:56111): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438641 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926673.445:56112): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926673.446:56113): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926673.635:56114): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926673.635:56115): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926673.637:56116): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438660 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926673.678:56117): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926673.678:56118): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926673.693:56119): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926673.693:56120): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926673.695:56121): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438673 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926673.726:56122): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926673.726:56123): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926673.738:56124): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926673.738:56125): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926673.740:56126): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438687 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926673.806:56127): pid=438703 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926673.807:56128): pid=438703 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617776677368767666706C69647A747173777A70666864727A616466786F6C72203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363637332E333932353239352D3135382D38303432313635383034303532342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926673.808:56129): pid=438703 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926673.811:56130): pid=438703 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926674.040:56131): pid=438703 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926674.041:56132): pid=438703 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926674.044:56133): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926674.045:56134): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926674.061:56135): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926674.061:56136): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926674.062:56137): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438706 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926674.087:56138): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926674.087:56139): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926674.135:56140): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926674.136:56141): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926674.137:56142): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438720 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926674.165:56143): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926674.166:56144): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926674.176:56145): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926674.176:56146): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926674.178:56147): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438733 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926674.210:56148): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926674.211:56149): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926674.366:56150): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926674.367:56151): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926674.368:56152): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438752 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926674.418:56153): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926674.418:56154): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926674.429:56155): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926674.429:56156): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926674.430:56157): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438765 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926674.462:56158): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926674.462:56159): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926674.474:56160): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926674.474:56161): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926674.476:56162): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438779 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926674.540:56163): pid=438795 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926674.540:56164): pid=438795 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6569736D6E6B7774656C6977727877796970726B75716670756B6D6C6A736272203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363637342E313636343135322D3138322D36313732353732363237323931362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926674.541:56165): pid=438795 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926674.544:56166): pid=438795 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926674.763:56167): pid=438795 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926674.763:56168): pid=438795 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926674.766:56169): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926674.767:56170): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926674.790:56171): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926674.790:56172): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926674.791:56173): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438798 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926674.837:56174): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926674.837:56175): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926674.855:56176): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926674.855:56177): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926674.856:56178): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438811 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926674.885:56179): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926674.886:56180): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926675.083:56181): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926675.084:56182): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926675.085:56183): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438825 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926675.131:56184): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926675.132:56185): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926675.147:56186): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926675.148:56187): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926675.149:56188): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438838 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926675.178:56189): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926675.178:56190): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926675.190:56191): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926675.190:56192): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926675.192:56193): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438852 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926675.254:56194): pid=438868 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926675.255:56195): pid=438868 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626B78776E746C626B7A796370616777717A7A616F6A72676372666F65707674203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363637342E313636343135322D3138322D36313732353732363237323931362F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926675.255:56196): pid=438868 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926675.258:56197): pid=438868 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926675.481:56198): pid=438868 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926675.481:56199): pid=438868 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926675.485:56200): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926675.485:56201): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926675.498:56202): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926675.498:56203): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926675.500:56204): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438871 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926675.531:56205): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926675.531:56206): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926675.653:56207): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926675.654:56208): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926675.655:56209): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438885 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926675.682:56210): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926675.683:56211): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926675.699:56212): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926675.699:56213): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926675.700:56214): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438898 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926675.736:56215): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926675.736:56216): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926675.760:56217): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926675.760:56218): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926675.761:56219): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438917 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926675.807:56220): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926675.808:56221): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926675.819:56222): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926675.819:56223): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926675.820:56224): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438930 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926675.850:56225): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926675.850:56226): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926675.866:56227): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926675.867:56228): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926675.868:56229): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438944 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926675.937:56230): pid=438960 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926675.937:56231): pid=438960 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F6A796670646762616C667264726671667571736763697168636777676870203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363637352E363833373531382D3233302D37303534333539373338383637392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926675.938:56232): pid=438960 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926675.940:56233): pid=438960 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926676.210:56234): pid=438960 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926676.210:56235): pid=438960 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926676.214:56236): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926676.214:56237): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926676.228:56238): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926676.228:56239): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926676.230:56240): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438963 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926676.258:56241): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926676.259:56242): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926676.310:56243): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926676.310:56244): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926676.312:56245): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438977 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926676.334:56246): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926676.334:56247): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926676.346:56248): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926676.346:56249): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926676.348:56250): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438990 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926676.381:56251): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926676.382:56252): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926676.428:56253): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926676.428:56254): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926676.429:56255): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439009 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926676.471:56256): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926676.472:56257): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926676.486:56258): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926676.486:56259): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926676.488:56260): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439022 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926676.519:56261): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926676.519:56262): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926676.533:56263): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926676.533:56264): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926676.535:56265): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439036 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926676.594:56266): pid=439052 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926676.594:56267): pid=439052 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786265767A79707369736E6C65786D696E706A6E6E646F647876696963756673203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363637362E333335313239332D3235382D3137373836303335323236303332312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926676.595:56268): pid=439052 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926676.597:56269): pid=439052 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926676.817:56270): pid=439052 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926676.818:56271): pid=439052 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926676.821:56272): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926676.821:56273): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926676.842:56274): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926676.842:56275): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926676.844:56276): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439055 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926676.899:56277): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926676.899:56278): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926676.913:56279): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926676.913:56280): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926676.914:56281): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439068 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926676.940:56282): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926676.940:56283): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926676.958:56284): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926676.958:56285): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926676.959:56286): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439082 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926677.010:56287): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926677.010:56288): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926677.023:56289): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926677.023:56290): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926677.024:56291): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439095 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926677.052:56292): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926677.052:56293): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926677.064:56294): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926677.064:56295): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926677.066:56296): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439109 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926677.128:56297): pid=439125 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926677.128:56298): pid=439125 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7666686F766A6F7261706E66627073667A71616E75646B72736D616968637773203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363637362E333335313239332D3235382D3137373836303335323236303332312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926677.129:56299): pid=439125 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926677.132:56300): pid=439125 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926677.358:56301): pid=439125 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926677.358:56302): pid=439125 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926677.362:56303): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926677.362:56304): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926677.374:56305): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926677.374:56306): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926677.376:56307): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439128 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926677.406:56308): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926677.406:56309): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926677.490:56310): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926677.490:56311): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926677.492:56312): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439142 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926677.521:56313): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926677.521:56314): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926677.531:56315): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926677.531:56316): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926677.533:56317): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439155 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926677.569:56318): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926677.569:56319): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926677.594:56320): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926677.594:56321): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926677.595:56322): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439174 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926677.642:56323): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926677.642:56324): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926677.655:56325): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926677.655:56326): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926677.657:56327): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439187 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926677.686:56328): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926677.686:56329): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926677.699:56330): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926677.699:56331): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926677.700:56332): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439201 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926677.766:56333): pid=439217 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926677.767:56334): pid=439217 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7861716C77737271746C77636F64746263767A76677A64626D79777A6F6F7864203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363637372E353232323031352D3330352D3132373431383731343230363731332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926677.767:56335): pid=439217 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926677.770:56336): pid=439217 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926677.838:56337): pid=439221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_END msg=audit(1764926677.997:56338): pid=439217 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926677.998:56339): pid=439217 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926678.001:56340): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926678.002:56341): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926678.016:56342): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926678.016:56343): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926678.017:56344): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439222 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926678.046:56345): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926678.046:56346): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_SESSION msg=audit(1764926678.081:56347): pid=439220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=439221 suid=74 rport=47322 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926678.081:56348): pid=439220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=439221 suid=74 rport=47322 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764926678.093:56349): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926678.093:56350): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926678.095:56351): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439236 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926678.123:56352): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926678.123:56353): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926678.134:56354): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926678.134:56355): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926678.135:56356): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439249 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926678.171:56357): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926678.171:56358): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926678.202:56359): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926678.202:56360): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926678.203:56361): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439268 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926678.250:56362): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926678.250:56363): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926678.263:56364): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926678.263:56365): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926678.265:56366): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439281 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926678.295:56367): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926678.295:56368): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926678.307:56369): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926678.307:56370): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926678.308:56371): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439295 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926678.375:56372): pid=439311 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926678.375:56373): pid=439311 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7570736D676A6572726863706C78707467776E75687865766C696167776868203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363637382E313233393736322D3333312D34333030333234373733383937392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926678.376:56374): pid=439311 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926678.379:56375): pid=439311 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926678.566:56376): pid=439311 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926678.566:56377): pid=439311 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926678.570:56378): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926678.570:56379): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926678.597:56380): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926678.597:56381): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926678.599:56382): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439314 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926678.651:56383): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926678.652:56384): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926678.673:56385): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926678.674:56386): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926678.675:56387): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439327 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926678.704:56388): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926678.704:56389): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926679.402:56390): pid=439220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=439221 suid=74 rport=47322 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926679.403:56391): pid=439220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439221 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926679.403:56392): pid=439220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=13.229.105.114 addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926679.404:56393): pid=439220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926679.404:56394): pid=439220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926679.416:56395): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926679.416:56396): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926679.417:56397): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439341 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926679.462:56398): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926679.462:56399): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926679.472:56400): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926679.473:56401): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926679.474:56402): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439354 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926679.502:56403): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926679.503:56404): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926679.516:56405): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926679.517:56406): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926679.518:56407): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439368 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926679.581:56408): pid=439384 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926679.581:56409): pid=439384 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696273756F676373716665666C7A776A6F7A7579636F6A7A647270646D637879203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363637382E313233393736322D3333312D34333030333234373733383937392F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926679.582:56410): pid=439384 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926679.585:56411): pid=439384 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926679.807:56412): pid=439384 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926679.807:56413): pid=439384 uid=1000 auid=1000 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926679.811:56414): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926679.811:56415): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926679.822:56416): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926679.823:56417): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926679.824:56418): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439387 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926679.852:56419): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926679.852:56420): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926680.155:56421): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=438519 suid=1000 rport=36106 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926680.155:56422): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438519 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926680.157:56423): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1764926680.158:56424): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926680.158:56425): pid=438516 uid=0 auid=1000 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=438516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764926680.331:56426): pid=439403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926680.482:56427): pid=439402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=439403 suid=74 rport=14613 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926680.483:56428): pid=439402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=439403 suid=74 rport=14613 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926681.346:56429): pid=439402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=439403 suid=74 rport=14613 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926681.346:56430): pid=439402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439403 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926681.347:56431): pid=439402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.228.135.173 addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926681.347:56432): pid=439402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926681.347:56433): pid=439402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926681.352:56434): pid=439404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926681.353:56435): pid=439401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=439404 suid=74 rport=41846 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=14.103.135.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926681.353:56436): pid=439401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=439404 suid=74 rport=41846 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=14.103.135.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926681.532:56437): pid=439406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764926682.502:56438): pid=439401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=439404 suid=74 rport=41846 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=14.103.135.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926682.502:56439): pid=439401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439404 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926682.503:56440): pid=439401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=14.103.135.94 addr=14.103.135.94 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926682.504:56441): pid=439401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926682.504:56442): pid=439401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=14.103.135.94 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926686.179:56443): pid=439408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439408 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926686.180:56444): pid=439407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=439408 suid=74 rport=53560 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926686.180:56445): pid=439407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=439408 suid=74 rport=53560 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1764926686.261:56446): pid=439407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926686.261:56447): pid=439407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5d:f5:28:43:c1:ce:d9:fe:fd:db:bd:89:9e:0e:5e:69:1c:b2:7e:10:3c:5c:36:4b:50:86:57:31:8b:3e:6d:e5 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764926686.289:56448): pid=439407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926686.290:56449): pid=439407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=439408 suid=74 rport=53560 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1764926686.292:56450): pid=439407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764926686.292:56451): pid=439407 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=240 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1764926686.292:56451): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc8365a080 a2=4 a3=3e8 items=0 ppid=410121 pid=439407 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=240 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764926686.292:56451): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1764926686.294:56452): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1764926686.326:56453): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926686.328:56454): pid=439410 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1764926686.329:56455): pid=439410 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1764926686.372:56456): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926686.372:56457): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926686.374:56458): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439411 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926686.407:56459): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926686.408:56460): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926686.425:56461): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926686.425:56462): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926686.427:56463): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439424 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926686.462:56464): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926686.462:56465): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926686.830:56466): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926686.830:56467): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926686.831:56468): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439443 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926686.861:56469): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926686.861:56470): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926686.907:56471): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926686.907:56472): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926686.908:56473): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439457 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926686.972:56474): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926686.972:56475): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926686.997:56476): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926686.997:56477): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926686.998:56478): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439470 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926687.027:56479): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926687.027:56480): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926687.062:56481): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926687.062:56482): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926687.063:56483): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439484 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926687.727:56484): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926687.727:56485): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926687.757:56486): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926687.757:56487): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926687.759:56488): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439505 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926687.790:56489): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926687.790:56490): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926688.184:56491): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926688.184:56492): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926688.186:56493): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439519 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926688.218:56494): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926688.218:56495): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926688.228:56496): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926688.228:56497): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926688.230:56498): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439532 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926688.264:56499): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926688.265:56500): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926688.450:56501): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926688.450:56502): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926688.452:56503): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439551 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926688.513:56504): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926688.513:56505): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926688.526:56506): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926688.526:56507): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926688.527:56508): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439564 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926688.557:56509): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926688.558:56510): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926688.575:56511): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926688.576:56512): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926688.577:56513): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439578 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926688.636:56514): pid=439594 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926688.636:56515): pid=439594 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7979786E776367737063747362786F72626A63646D6E6A72617664737573776B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363638382E323138353138332D36322D3233373833373035373531313336372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926688.637:56516): pid=439594 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926688.640:56517): pid=439594 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926688.853:56518): pid=439594 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926688.853:56519): pid=439594 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926688.857:56520): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926688.857:56521): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926688.870:56522): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926688.870:56523): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926688.872:56524): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439597 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926688.894:56525): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926688.895:56526): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926688.919:56527): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926688.919:56528): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926688.920:56529): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439611 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926688.938:56530): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926688.939:56531): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926688.954:56532): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926688.954:56533): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926688.955:56534): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439624 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926688.986:56535): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926688.986:56536): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926689.407:56537): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926689.408:56538): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926689.409:56539): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439643 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926689.457:56540): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926689.457:56541): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926689.471:56542): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926689.471:56543): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926689.473:56544): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439656 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926689.501:56545): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926689.502:56546): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926689.514:56547): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926689.514:56548): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926689.516:56549): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439670 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926689.565:56550): pid=439686 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926689.565:56551): pid=439686 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C67667269636668727664736E6E716F6A67657171636478786763727976616E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363638382E393339383733322D36322D3235383339323436343131363233342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926689.566:56552): pid=439686 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926689.569:56553): pid=439686 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926689.770:56554): pid=439686 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926689.771:56555): pid=439686 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926689.774:56556): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926689.774:56557): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926689.791:56558): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926689.791:56559): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926689.793:56560): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439689 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926689.817:56561): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926689.818:56562): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926689.933:56563): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926689.934:56564): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926689.935:56565): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439703 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926689.965:56566): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926689.966:56567): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926689.976:56568): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926689.976:56569): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926689.978:56570): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439716 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926690.015:56571): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926690.015:56572): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926690.041:56573): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926690.041:56574): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926690.043:56575): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439735 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926690.103:56576): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926690.103:56577): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926690.119:56578): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926690.119:56579): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926690.121:56580): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439748 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926690.150:56581): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926690.150:56582): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926690.163:56583): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926690.163:56584): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926690.164:56585): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439762 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926690.507:56586): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926690.507:56587): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926690.521:56588): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926690.522:56589): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926690.523:56590): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439779 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926690.550:56591): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926690.551:56592): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_START msg=audit(1764926691.013:56593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926691.017:56594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926691.021:56595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926691.024:56596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926691.029:56597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926691.032:56598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926691.376:56599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926691.437:56600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926691.476:56601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926691.482:56602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926691.508:56603): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926691.508:56604): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926691.509:56605): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439960 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926691.533:56606): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926691.533:56607): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926691.546:56608): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926691.546:56609): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926691.547:56610): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439975 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926691.573:56611): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926691.573:56612): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_STOP msg=audit(1764926691.607:56613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926691.625:56614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926691.774:56615): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926691.774:56616): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926691.774:56617): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439996 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926691.826:56618): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926691.826:56619): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926691.838:56620): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926691.838:56621): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926691.840:56622): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440009 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926691.869:56623): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926691.869:56624): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926691.882:56625): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926691.882:56626): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926691.884:56627): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440023 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926691.951:56628): pid=440039 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926691.951:56629): pid=440039 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D716B636D697964796970616C75717A73746A6D6B7274747579726E6A716C7A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363639312E353336363337382D3133312D3231353333373136343734323331372F416E736962616C6C5A5F7365626F6F6C65616E2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926691.953:56630): pid=440039 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926691.957:56631): pid=440039 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926692.351:56632): pid=440039 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926692.351:56633): pid=440039 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926692.355:56634): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926692.355:56635): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926692.372:56636): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926692.372:56637): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926692.374:56638): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440042 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926692.405:56639): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926692.405:56640): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926692.603:56641): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926692.603:56642): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926692.605:56643): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440056 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926692.635:56644): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926692.636:56645): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926692.649:56646): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926692.649:56647): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926692.650:56648): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440069 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926692.685:56649): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926692.685:56650): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926692.712:56651): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926692.712:56652): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926692.713:56653): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440088 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926692.767:56654): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926692.767:56655): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926692.783:56656): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926692.783:56657): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926692.784:56658): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440101 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926692.807:56659): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926692.807:56660): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926692.820:56661): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926692.820:56662): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926692.822:56663): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440115 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926692.865:56664): pid=440131 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926692.866:56665): pid=440131 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726969706D6F657A6F6378727A6B78616266666A736361656662707175707767203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363639322E363339343235332D3136312D3136373238353532333639343432392F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926692.866:56666): pid=440131 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926692.868:56667): pid=440131 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926693.575:56668): pid=440131 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926693.576:56669): pid=440131 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926693.579:56670): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926693.579:56671): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926693.784:56672): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926693.784:56673): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926693.786:56674): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440143 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926693.799:56675): pid=440149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_END msg=audit(1764926693.838:56676): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926693.839:56677): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926693.857:56678): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926693.857:56679): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926693.859:56680): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440157 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926693.888:56681): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926693.888:56682): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926693.899:56683): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926693.899:56684): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926693.900:56685): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440171 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_SESSION msg=audit(1764926693.907:56686): pid=440142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=440149 suid=74 rport=45624 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926693.907:56687): pid=440142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=440149 suid=74 rport=45624 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ACCT msg=audit(1764926693.967:56688): pid=440187 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926693.967:56689): pid=440187 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6266776474726370646A6D6F7872676979726176756F75796C6F776D6E6B7673203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363639322E363339343235332D3136312D3136373238353532333639343432392F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926693.968:56690): pid=440187 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926693.971:56691): pid=440187 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926694.367:56692): pid=439405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439406 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926694.368:56693): pid=439405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439405 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926694.368:56694): pid=439405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=106.13.169.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926694.551:56695): pid=440142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=440149 suid=74 rport=45624 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926694.551:56696): pid=440142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440149 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926694.552:56697): pid=440142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.185.99.40 addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926694.552:56698): pid=440142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926694.552:56699): pid=440142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1764926697.344:56700): pid=440187 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926697.344:56701): pid=440187 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926697.348:56702): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926697.348:56703): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926697.362:56704): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926697.362:56705): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926697.363:56706): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440192 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926697.389:56707): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926697.389:56708): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926697.627:56709): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926697.628:56710): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926697.629:56711): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440206 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926697.654:56712): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926697.654:56713): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926697.665:56714): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926697.665:56715): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926697.666:56716): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440219 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926697.695:56717): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926697.695:56718): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926698.010:56719): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926698.010:56720): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926698.012:56721): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440238 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926698.080:56722): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926698.080:56723): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926698.093:56724): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926698.093:56725): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926698.094:56726): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440251 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926698.124:56727): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926698.125:56728): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926698.137:56729): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926698.137:56730): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926698.174:56731): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440265 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926698.238:56732): pid=440281 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926698.238:56733): pid=440281 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656466797471777965696A7563716B67706A6A6B6A6561756A6F616E766F6376203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363639372E36353532382D3139372D3230313936373039373835303833342F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926698.239:56734): pid=440281 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926698.241:56735): pid=440281 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926698.626:56736): pid=440281 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926698.626:56737): pid=440281 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926698.630:56738): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926698.630:56739): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926698.645:56740): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926698.645:56741): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926698.646:56742): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440287 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926698.675:56743): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926698.675:56744): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926698.756:56745): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926698.757:56746): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926698.758:56747): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440301 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926698.785:56748): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926698.785:56749): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926698.797:56750): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926698.797:56751): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926698.798:56752): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440314 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926698.833:56753): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926698.833:56754): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926699.004:56755): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926699.004:56756): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926699.005:56757): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440333 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926699.051:56758): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926699.051:56759): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926699.069:56760): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926699.069:56761): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926699.070:56762): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440346 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926699.101:56763): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926699.101:56764): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926699.116:56765): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926699.116:56766): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926699.117:56767): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440360 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926699.178:56768): pid=440376 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926699.178:56769): pid=440376 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7064747366647773796F636171726E657669776768696774716E667A616C696A203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363639382E3738363037382D3232312D3237343233333435373830323830382F416E736962616C6C5A5F6564706D5F6E667461626C65735F736E69707065742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926699.179:56770): pid=440376 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926699.182:56771): pid=440376 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926699.412:56772): pid=440376 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926699.413:56773): pid=440376 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926699.416:56774): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926699.416:56775): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926700.007:56776): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926700.007:56777): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926700.009:56778): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440379 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926700.041:56779): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926700.041:56780): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926700.298:56781): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926700.298:56782): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926700.300:56783): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440393 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926700.329:56784): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926700.330:56785): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926700.343:56786): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926700.343:56787): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926700.345:56788): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440406 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926700.379:56789): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926700.379:56790): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926700.411:56791): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926700.411:56792): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926700.413:56793): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440425 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926700.460:56794): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926700.460:56795): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926700.475:56796): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926700.475:56797): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926700.476:56798): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440438 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926700.505:56799): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926700.505:56800): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926700.523:56801): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926700.523:56802): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926700.524:56803): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440452 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926700.577:56804): pid=440468 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926700.577:56805): pid=440468 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796563726C656D6B79746B786D72746B66686F6B626B7161736C7770746F6872203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730302E333330363839322D3234382D34343931333334303436343631352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926700.578:56806): pid=440468 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926700.580:56807): pid=440468 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926700.778:56808): pid=440468 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926700.778:56809): pid=440468 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926700.782:56810): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926700.782:56811): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926700.797:56812): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926700.797:56813): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926700.799:56814): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440471 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926700.827:56815): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926700.828:56816): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926700.949:56817): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926700.949:56818): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926700.950:56819): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440485 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926700.980:56820): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926700.980:56821): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926700.991:56822): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926700.991:56823): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926700.992:56824): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440498 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926701.028:56825): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926701.028:56826): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926701.210:56827): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926701.210:56828): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926701.211:56829): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440517 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926701.256:56830): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926701.256:56831): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926701.271:56832): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926701.271:56833): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926701.272:56834): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440530 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926701.302:56835): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926701.302:56836): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926701.317:56837): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926701.317:56838): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926701.319:56839): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440544 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926701.373:56840): pid=440560 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926701.374:56841): pid=440560 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C68627A6B6A64656F7963766866706674746F726875706C666668716D6974203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730302E3938303939382D3237322D3133333038373532343832373038362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926701.375:56842): pid=440560 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926701.378:56843): pid=440560 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926701.616:56844): pid=440560 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926701.616:56845): pid=440560 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926701.620:56846): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926701.620:56847): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926701.640:56848): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926701.640:56849): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926701.642:56850): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440565 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926701.684:56851): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926701.685:56852): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926701.698:56853): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926701.698:56854): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926701.699:56855): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440578 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926701.729:56856): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926701.730:56857): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926702.209:56858): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926702.209:56859): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926702.210:56860): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440592 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926702.271:56861): pid=440608 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926702.271:56862): pid=440608 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746C6B79646371687765786E6A6C627366686777636476616D7962676B757874203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730302E3938303939382D3237322D3133333038373532343832373038362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926702.272:56863): pid=440608 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926702.274:56864): pid=440608 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926702.493:56865): pid=440608 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926702.493:56866): pid=440608 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926702.496:56867): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926702.496:56868): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926702.511:56869): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926702.511:56870): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926702.512:56871): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440611 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926702.535:56872): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926702.535:56873): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926702.629:56874): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926702.629:56875): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926702.630:56876): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440625 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926702.659:56877): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926702.659:56878): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926702.670:56879): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926702.670:56880): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926702.671:56881): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440638 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926702.703:56882): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926702.703:56883): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926702.731:56884): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926702.731:56885): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926702.732:56886): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440657 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926702.773:56887): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926702.773:56888): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926702.784:56889): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926702.784:56890): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926702.784:56891): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440670 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926702.808:56892): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926702.808:56893): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926702.820:56894): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926702.820:56895): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926702.822:56896): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440684 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926702.882:56897): pid=440700 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926702.882:56898): pid=440700 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796570706D746F6E656E676B66716976736A716F6F7A7A627472777A6A6E6A79203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730322E363630323337382D3330382D3132373234383036373633343732312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926702.883:56899): pid=440700 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926702.886:56900): pid=440700 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926703.104:56901): pid=440700 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926703.105:56902): pid=440700 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926703.108:56903): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926703.108:56904): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926703.136:56905): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926703.136:56906): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926703.137:56907): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440705 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926703.171:56908): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926703.171:56909): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926703.189:56910): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926703.189:56911): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926703.191:56912): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440718 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926703.218:56913): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926703.219:56914): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926703.284:56915): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926703.284:56916): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926703.286:56917): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440732 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926703.340:56918): pid=440748 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926703.340:56919): pid=440748 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C73766A776E6B787864637A64616F7264756C71636B7274726D706D766479203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730322E363630323337382D3330382D3132373234383036373633343732312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926703.341:56920): pid=440748 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926703.344:56921): pid=440748 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926703.561:56922): pid=440748 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926703.562:56923): pid=440748 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926703.566:56924): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926703.566:56925): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926703.580:56926): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926703.580:56927): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926703.581:56928): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440751 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926703.613:56929): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926703.613:56930): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926703.868:56931): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926703.869:56932): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926703.870:56933): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440765 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926703.900:56934): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926703.900:56935): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926703.912:56936): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926703.912:56937): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926703.913:56938): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440778 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926703.949:56939): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926703.949:56940): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926703.978:56941): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926703.978:56942): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926703.979:56943): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440797 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926704.032:56944): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926704.032:56945): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926704.044:56946): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926704.044:56947): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926704.045:56948): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440810 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926704.075:56949): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926704.075:56950): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926704.093:56951): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926704.093:56952): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926704.094:56953): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440824 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926704.160:56954): pid=440840 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926704.161:56955): pid=440840 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687066716761637A696B796F6B766C69696B64666471686E6F6C757565746675203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730332E393032303730332D3334342D3230363036373332313431303639352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926704.161:56956): pid=440840 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926704.164:56957): pid=440840 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926705.410:56958): pid=440840 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926705.410:56959): pid=440840 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926705.414:56960): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926705.414:56961): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926705.439:56962): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926705.439:56963): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926705.441:56964): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440845 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926705.487:56965): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926705.487:56966): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926705.499:56967): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926705.499:56968): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926705.500:56969): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440858 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926705.531:56970): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926705.531:56971): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926705.546:56972): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926705.546:56973): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926705.548:56974): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440872 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926705.612:56975): pid=440888 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926705.613:56976): pid=440888 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7961797568626D6F6A77696A6764666E647878666666696B676D6E7877626963203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730332E393032303730332D3334342D3230363036373332313431303639352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926705.616:56977): pid=440888 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926705.618:56978): pid=440888 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926705.841:56979): pid=440888 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926705.841:56980): pid=440888 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926705.845:56981): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926705.845:56982): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926705.858:56983): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926705.859:56984): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926705.859:56985): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440891 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926705.885:56986): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926705.885:56987): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926705.977:56988): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926705.977:56989): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926705.978:56990): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440905 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926706.009:56991): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926706.009:56992): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926706.021:56993): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926706.021:56994): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926706.022:56995): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440918 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926706.058:56996): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926706.058:56997): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926706.240:56998): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926706.240:56999): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926706.242:57000): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440937 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926706.294:57001): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926706.294:57002): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926706.312:57003): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926706.312:57004): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926706.313:57005): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440950 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926706.343:57006): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926706.343:57007): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926706.358:57008): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926706.358:57009): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926706.360:57010): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440964 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926706.424:57011): pid=440980 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926706.424:57012): pid=440980 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746275666A64716A6377777A6E676F7662716B7262616961726E776B6462796D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730362E303132303735372D3338332D36353739383739343935333039322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926706.425:57013): pid=440980 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926706.427:57014): pid=440980 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926706.663:57015): pid=440980 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926706.664:57016): pid=440980 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926706.668:57017): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926706.668:57018): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926706.673:57019): pid=440985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926706.683:57020): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926706.683:57021): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926706.684:57022): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440986 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926706.713:57023): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926706.713:57024): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926706.787:57025): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926706.787:57026): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926706.789:57027): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441000 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926706.817:57028): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926706.817:57029): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926706.831:57030): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926706.831:57031): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926706.832:57032): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441013 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926706.867:57033): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926706.867:57034): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_SESSION msg=audit(1764926706.915:57035): pid=440984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=440985 suid=74 rport=43288 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926706.915:57036): pid=440984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=440985 suid=74 rport=43288 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764926707.024:57037): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926707.024:57038): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926707.026:57039): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441032 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926707.073:57040): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926707.073:57041): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926707.085:57042): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926707.085:57043): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926707.087:57044): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441045 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926707.117:57045): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926707.117:57046): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926707.130:57047): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926707.130:57048): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926707.132:57049): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441059 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926707.197:57050): pid=441075 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926707.197:57051): pid=441075 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647062656F676E63677A656A61686C627A6E66766E646C64736C6A6A6C767379203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730362E383231383935312D3430372D3139363530383134373334333438352F416E736962616C6C5A5F6564706D5F6E667461626C65735F66726F6D5F66696C65732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926707.198:57052): pid=441075 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926707.201:57053): pid=441075 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926707.438:57054): pid=441075 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926707.438:57055): pid=441075 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926707.442:57056): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926707.442:57057): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926707.455:57058): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926707.455:57059): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926707.456:57060): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441078 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926707.486:57061): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926707.486:57062): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926707.529:57063): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926707.529:57064): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926707.530:57065): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441092 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926707.559:57066): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926707.559:57067): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926707.590:57068): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926707.590:57069): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926707.592:57070): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441105 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926707.625:57071): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926707.625:57072): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926707.687:57073): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926707.687:57074): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926707.689:57075): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441124 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926707.738:57076): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926707.738:57077): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926707.754:57078): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926707.754:57079): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926707.755:57080): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441137 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926707.785:57081): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926707.785:57082): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926707.814:57083): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926707.814:57084): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926707.815:57085): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441151 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926707.872:57086): pid=441167 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926707.872:57087): pid=441167 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76776770707064756E68756865786364787A747867687763776F6F74756B6770203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730372E353638333430332D3433312D3132373336323934383931313339382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926707.873:57088): pid=441167 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926707.877:57089): pid=441167 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926708.095:57090): pid=441167 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926708.095:57091): pid=441167 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926708.098:57092): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926708.098:57093): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926708.117:57094): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926708.117:57095): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926708.118:57096): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441172 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926708.154:57097): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926708.154:57098): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926708.168:57099): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926708.168:57100): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926708.169:57101): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441185 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926708.192:57102): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926708.192:57103): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926708.236:57104): pid=440984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=440985 suid=74 rport=43288 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926708.236:57105): pid=440984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440985 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926708.237:57106): pid=440984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.106.194.74 addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926708.237:57107): pid=440984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=440984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926708.237:57108): pid=440984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926708.354:57109): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926708.354:57110): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926708.356:57111): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441199 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926708.408:57112): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926708.408:57113): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926708.429:57114): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926708.429:57115): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926708.430:57116): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441212 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926708.461:57117): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926708.461:57118): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926708.472:57119): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926708.472:57120): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926708.474:57121): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441226 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926708.530:57122): pid=441242 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926708.530:57123): pid=441242 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7375627A7867676C68737A78627177706E6662696C62707768626273686C6D6B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730372E353638333430332D3433312D3132373336323934383931313339382F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926708.532:57124): pid=441242 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926708.535:57125): pid=441242 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926708.746:57126): pid=441242 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926708.746:57127): pid=441242 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926708.749:57128): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926708.750:57129): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926708.763:57130): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926708.763:57131): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926708.764:57132): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441245 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926708.792:57133): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926708.792:57134): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926708.837:57135): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926708.837:57136): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926708.838:57137): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441259 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926708.865:57138): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926708.866:57139): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926708.881:57140): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926708.881:57141): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926708.882:57142): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441272 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926708.914:57143): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926708.915:57144): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926708.981:57145): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926708.981:57146): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926708.982:57147): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441291 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926709.034:57148): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926709.034:57149): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926709.051:57150): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926709.051:57151): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926709.052:57152): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441304 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926709.086:57153): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926709.086:57154): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926709.101:57155): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926709.101:57156): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926709.103:57157): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441318 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926709.165:57158): pid=441334 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926709.166:57159): pid=441334 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7961706C746E66647A706A6673677276756D66776D7067716774646A79776D62203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730382E383639343932332D3437362D3135333132393031313335323930342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926709.166:57160): pid=441334 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926709.168:57161): pid=441334 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926709.400:57162): pid=441334 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926709.400:57163): pid=441334 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926709.404:57164): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926709.404:57165): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926709.420:57166): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926709.421:57167): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926709.422:57168): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441339 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926709.457:57169): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926709.457:57170): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926709.469:57171): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926709.470:57172): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926709.471:57173): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441352 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926709.501:57174): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926709.501:57175): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926709.529:57176): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926709.529:57177): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926709.530:57178): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441366 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926709.577:57179): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926709.577:57180): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926709.602:57181): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926709.603:57182): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926709.604:57183): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441379 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926709.634:57184): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926709.634:57185): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926709.661:57186): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926709.661:57187): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926709.662:57188): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441393 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926709.725:57189): pid=441409 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926709.726:57190): pid=441409 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77647267716777676B7564636761636E68726873786D7066656E716E717A6472203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363730382E383639343932332D3437362D3135333132393031313335323930342F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926709.727:57191): pid=441409 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926709.729:57192): pid=441409 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926709.963:57193): pid=441409 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926709.963:57194): pid=441409 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926709.967:57195): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926709.967:57196): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926709.980:57197): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926709.980:57198): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926709.982:57199): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441412 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926710.013:57200): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926710.013:57201): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926710.116:57202): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926710.116:57203): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926710.117:57204): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441426 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926710.148:57205): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926710.148:57206): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926710.506:57207): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926710.506:57208): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926710.507:57209): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441474 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926710.544:57210): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926710.545:57211): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926710.590:57212): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926710.590:57213): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926710.592:57214): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441493 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926710.637:57215): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926710.637:57216): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926710.650:57217): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926710.650:57218): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926710.651:57219): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441506 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926710.680:57220): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926710.681:57221): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926710.694:57222): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926710.694:57223): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926710.696:57224): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441520 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926710.752:57225): pid=441536 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926710.752:57226): pid=441536 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757861627A7664796D74656563787567646D7A696F6879777778707162786A63203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731302E313531363930352D3532312D3231363233343634343435333430322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926710.753:57227): pid=441536 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926710.757:57228): pid=441536 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926710.972:57229): pid=441536 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926710.972:57230): pid=441536 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926710.977:57231): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926710.977:57232): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926710.998:57233): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926710.999:57234): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926711.000:57235): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441541 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926711.033:57236): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926711.033:57237): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926711.048:57238): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926711.048:57239): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926711.049:57240): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441554 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926711.074:57241): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926711.074:57242): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926711.094:57243): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926711.094:57244): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926711.095:57245): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441568 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926711.136:57246): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926711.136:57247): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926711.149:57248): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926711.149:57249): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926711.151:57250): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441581 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926711.180:57251): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926711.180:57252): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926711.193:57253): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926711.193:57254): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926711.195:57255): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441595 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926711.258:57256): pid=441611 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926711.259:57257): pid=441611 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78637A676B727A6169617666756674636A7061716A74766D73726B6A70716D68203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731302E313531363930352D3532312D3231363233343634343435333430322F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926711.259:57258): pid=441611 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926711.261:57259): pid=441611 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926711.477:57260): pid=441611 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926711.478:57261): pid=441611 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926711.481:57262): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926711.481:57263): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926711.494:57264): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926711.494:57265): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926711.495:57266): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441614 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926711.521:57267): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926711.521:57268): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926711.679:57269): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926711.679:57270): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926711.680:57271): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441631 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926711.709:57272): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926711.709:57273): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926711.727:57274): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926711.728:57275): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926711.729:57276): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441644 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926711.763:57277): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926711.763:57278): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926711.800:57279): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926711.801:57280): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926711.802:57281): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441663 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926711.858:57282): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926711.858:57283): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926712.607:57284): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926712.608:57285): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926712.609:57286): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441676 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926712.640:57287): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926712.641:57288): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926712.653:57289): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926712.653:57290): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926712.655:57291): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441690 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926712.724:57292): pid=441706 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926712.724:57293): pid=441706 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727A6F7376617572706D6B6767726A7967756F646865617366776F6F6B6C6962203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731312E373135323830332D3536362D3236373431353730343431313332312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926712.725:57294): pid=441706 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926712.727:57295): pid=441706 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926712.958:57296): pid=441706 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926712.958:57297): pid=441706 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926712.961:57298): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926712.962:57299): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926712.980:57300): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926712.980:57301): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926712.981:57302): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441712 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926713.017:57303): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926713.017:57304): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926713.028:57305): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926713.029:57306): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926713.030:57307): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441725 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926713.058:57308): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926713.059:57309): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926713.086:57310): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926713.086:57311): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926713.087:57312): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441739 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926713.137:57313): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926713.137:57314): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926713.154:57315): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926713.154:57316): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926713.156:57317): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441752 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926713.183:57318): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926713.183:57319): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926713.200:57320): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926713.201:57321): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926713.202:57322): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441766 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926713.256:57323): pid=441782 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926713.256:57324): pid=441782 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796F68656C6D63636D78686469696964746C7762717275716566696B74766D66203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731312E373135323830332D3536362D3236373431353730343431313332312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926713.257:57325): pid=441782 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926713.260:57326): pid=441782 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926713.455:57327): pid=441782 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926713.455:57328): pid=441782 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926713.459:57329): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926713.459:57330): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926713.471:57331): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926713.471:57332): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926713.472:57333): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441785 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926713.499:57334): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926713.499:57335): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926713.745:57336): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926713.745:57337): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926713.746:57338): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441799 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926713.775:57339): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926713.775:57340): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926713.788:57341): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926713.788:57342): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926713.789:57343): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441812 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926713.824:57344): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926713.824:57345): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926713.951:57346): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926713.951:57347): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926713.952:57348): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441831 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926713.999:57349): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926713.999:57350): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926714.011:57351): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926714.011:57352): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926714.012:57353): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441844 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926714.042:57354): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926714.042:57355): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926714.055:57356): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926714.056:57357): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926714.057:57358): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441858 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926714.112:57359): pid=441874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926714.113:57360): pid=441874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667266676361636178746A79647670656963696A6A686F77786C6E7671716D6E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731332E373737373631352D3631312D3131353530353033363333303939372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926714.113:57361): pid=441874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926714.115:57362): pid=441874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926714.330:57363): pid=441874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926714.330:57364): pid=441874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926714.334:57365): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926714.334:57366): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926714.358:57367): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926714.358:57368): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926714.360:57369): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441879 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926714.390:57370): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926714.390:57371): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926714.404:57372): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926714.404:57373): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926714.405:57374): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441892 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926714.429:57375): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926714.429:57376): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926714.453:57377): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926714.454:57378): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926714.455:57379): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441906 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926714.514:57380): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926714.514:57381): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926714.526:57382): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926714.527:57383): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926714.528:57384): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441919 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926714.560:57385): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926714.560:57386): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926714.582:57387): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926714.583:57388): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926714.584:57389): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441933 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926714.647:57390): pid=441949 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926714.647:57391): pid=441949 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7866766B6564776D6A757662766565727066776E74776465617A65756A637265203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731332E373737373631352D3631312D3131353530353033363333303939372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926714.648:57392): pid=441949 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926714.651:57393): pid=441949 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926714.877:57394): pid=441949 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926714.877:57395): pid=441949 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926714.881:57396): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926714.881:57397): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926714.894:57398): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926714.894:57399): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926714.895:57400): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441952 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926714.922:57401): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926714.922:57402): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926715.071:57403): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926715.071:57404): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926715.073:57405): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441966 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926715.103:57406): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926715.103:57407): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926715.115:57408): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926715.115:57409): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926715.116:57410): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441979 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926715.148:57411): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926715.148:57412): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926715.175:57413): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926715.175:57414): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926715.176:57415): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=441998 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926715.224:57416): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926715.225:57417): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926715.240:57418): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926715.240:57419): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926715.242:57420): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442011 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926715.274:57421): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926715.274:57422): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926715.290:57423): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926715.290:57424): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926715.292:57425): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442025 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926715.359:57426): pid=442041 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926715.360:57427): pid=442041 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C756E706C79727262786461647970776E61637873796F6964626B6F7076667A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731352E313035363036382D3635362D3138313136363933313336383535352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926715.361:57428): pid=442041 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926715.364:57429): pid=442041 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926715.583:57430): pid=442041 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926715.584:57431): pid=442041 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926715.587:57432): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926715.587:57433): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926715.603:57434): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926715.603:57435): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926715.604:57436): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442044 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926715.633:57437): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926715.633:57438): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926715.715:57439): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926715.715:57440): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926715.717:57441): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442058 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926715.745:57442): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926715.745:57443): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926715.758:57444): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926715.759:57445): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926715.760:57446): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442071 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926715.816:57447): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926715.816:57448): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926715.843:57449): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926715.843:57450): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926715.845:57451): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442090 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926715.886:57452): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926715.886:57453): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926715.903:57454): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926715.903:57455): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926715.904:57456): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442103 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926715.932:57457): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926715.932:57458): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926715.944:57459): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926715.944:57460): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926715.945:57461): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442117 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926716.010:57462): pid=442133 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926716.010:57463): pid=442133 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72696262726A69696B6374726B6F6E76706B646B756678796E77646673786568203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731352E373437323636332D3638302D34363433333132383433323536322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926716.011:57464): pid=442133 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926716.013:57465): pid=442133 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926716.243:57466): pid=442133 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926716.244:57467): pid=442133 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926716.247:57468): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926716.247:57469): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926716.264:57470): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926716.264:57471): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926716.265:57472): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442139 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926716.290:57473): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926716.290:57474): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926716.451:57475): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926716.451:57476): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926716.452:57477): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442153 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926716.479:57478): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926716.479:57479): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926716.492:57480): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926716.492:57481): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926716.493:57482): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442166 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926716.528:57483): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926716.528:57484): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926716.724:57485): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926716.724:57486): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926716.726:57487): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442185 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926716.770:57488): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926716.770:57489): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926716.784:57490): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926716.784:57491): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926716.785:57492): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442198 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926716.813:57493): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926716.813:57494): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926716.824:57495): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926716.824:57496): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926716.825:57497): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442212 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926716.881:57498): pid=442228 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926716.881:57499): pid=442228 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E796671796771646B75616B6E796D77676763626F7674696C6E616E6F7868203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731362E343832303435322D3730342D35393138343434313332303939342F416E736962616C6C5A5F626C6F636B696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926716.881:57500): pid=442228 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926716.883:57501): pid=442228 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926717.110:57502): pid=442228 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926717.110:57503): pid=442228 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926717.113:57504): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926717.113:57505): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926717.128:57506): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926717.128:57507): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926717.129:57508): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442231 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926717.154:57509): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926717.155:57510): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926717.313:57511): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926717.313:57512): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926717.315:57513): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442245 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926717.343:57514): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926717.343:57515): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926717.357:57516): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926717.357:57517): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926717.358:57518): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442258 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926717.394:57519): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926717.394:57520): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926717.416:57521): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926717.416:57522): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926717.417:57523): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442277 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926717.469:57524): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926717.469:57525): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926717.484:57526): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926717.484:57527): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926717.485:57528): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442290 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926717.513:57529): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926717.513:57530): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926717.526:57531): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926717.526:57532): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926717.527:57533): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442304 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926717.586:57534): pid=442320 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926717.587:57535): pid=442320 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776E63666F7A78716A61666B78786176716162746E78617065617A74656B6166203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731372E333435373439312D3733312D32323937313736323534323735362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926717.587:57536): pid=442320 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926717.589:57537): pid=442320 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=NETFILTER_CFG msg=audit(1764926717.795:57538): table=raw:11 family=1 entries=2 op=nft_register_chain pid=442323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=NETFILTER_CFG msg=audit(1764926717.795:57538): table=filter:11 family=1 entries=1 op=nft_register_chain pid=442323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=SYSCALL msg=audit(1764926717.795:57538): arch=c000003e syscall=46 success=yes exit=180 a0=3 a1=7ffcf55fccb0 a2=0 a3=7f9d2bba0bc4 items=0 ppid=442322 pid=442323 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=240 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764926717.795:57538): proctitle=6E6674002D66002F6574632F6E667461626C65732F6564706D2D636861696E732E6E6674 type=USER_END msg=audit(1764926717.810:57539): pid=442320 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926717.810:57540): pid=442320 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926717.813:57541): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926717.813:57542): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926717.827:57543): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926717.828:57544): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926717.829:57545): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442324 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926717.852:57546): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926717.852:57547): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926717.940:57548): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926717.940:57549): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926717.942:57550): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442338 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926717.968:57551): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926717.968:57552): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926717.983:57553): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926717.983:57554): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926717.984:57555): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442351 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926718.016:57556): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926718.016:57557): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926718.039:57558): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926718.039:57559): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926718.040:57560): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442370 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926718.086:57561): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926718.086:57562): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926718.098:57563): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926718.098:57564): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926718.100:57565): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442383 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926718.130:57566): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926718.130:57567): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926718.143:57568): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926718.143:57569): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926718.144:57570): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442397 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926718.202:57571): pid=442413 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926718.202:57572): pid=442413 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616777706D6677616C6C6E6B79696C72776D6D736F6F6F7872646368766C6A6F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731372E393731323639342D3735352D3131393838373332303139383236392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926718.203:57573): pid=442413 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926718.205:57574): pid=442413 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926718.447:57575): pid=442413 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926718.447:57576): pid=442413 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926718.451:57577): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926718.451:57578): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926718.469:57579): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926718.469:57580): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926718.471:57581): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442418 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926718.499:57582): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926718.499:57583): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926718.580:57584): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926718.580:57585): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926718.581:57586): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442432 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926718.608:57587): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926718.608:57588): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926718.625:57589): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926718.625:57590): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926718.626:57591): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442445 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926718.663:57592): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926718.663:57593): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926718.686:57594): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926718.686:57595): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926718.688:57596): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442464 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926718.736:57597): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926718.736:57598): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926718.748:57599): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926718.748:57600): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926718.750:57601): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442477 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926718.780:57602): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926718.781:57603): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926718.792:57604): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926718.792:57605): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926718.793:57606): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442491 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926718.856:57607): pid=442507 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926718.857:57608): pid=442507 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F636E69766D7277636962716E747A78746E7A6C756F656767766B716D6377203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731382E363134323131382D3737392D3231353938373633393137343133372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926718.857:57609): pid=442507 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926718.860:57610): pid=442507 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=NETFILTER_CFG msg=audit(1764926719.079:57611): table=raw:12 family=1 entries=4 op=nft_register_rule pid=442512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=NETFILTER_CFG msg=audit(1764926719.079:57611): table=filter:12 family=1 entries=16 op=nft_register_chain pid=442512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=SYSCALL msg=audit(1764926719.079:57611): arch=c000003e syscall=46 success=yes exit=4676 a0=3 a1=7fffa49cb120 a2=0 a3=7f0aa1127bc4 items=0 ppid=442510 pid=442512 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=240 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764926719.079:57611): proctitle=6E6674002D66002D type=USER_END msg=audit(1764926719.096:57612): pid=442507 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926719.096:57613): pid=442507 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926719.099:57614): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926719.099:57615): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926719.112:57616): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926719.112:57617): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926719.113:57618): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442513 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926719.142:57619): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926719.142:57620): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926719.188:57621): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926719.188:57622): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926719.189:57623): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442527 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926719.217:57624): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926719.217:57625): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926719.229:57626): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926719.229:57627): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926719.230:57628): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442540 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926719.267:57629): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926719.267:57630): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926719.292:57631): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926719.292:57632): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926719.293:57633): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442559 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926719.341:57634): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926719.341:57635): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926719.352:57636): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926719.352:57637): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926719.354:57638): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442572 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926719.384:57639): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926719.384:57640): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926719.395:57641): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926719.395:57642): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926719.397:57643): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442586 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926719.463:57644): pid=442602 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_LOGIN msg=audit(1764926719.463:57645): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926719.463:57646): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_CMD msg=audit(1764926719.463:57647): pid=442602 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627277776A67757471766576797373656F626F6E656A696777746363666D6671203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363731392E323139393135392D3830332D3138303036383433363437353132372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926719.464:57648): pid=442602 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926719.468:57649): pid=442602 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_ACCT msg=audit(1764926719.515:57650): pid=442604 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926719.515:57651): pid=442604 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926719.516:57652): pid=442604 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926719.519:57653): pid=442604 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926719.521:57654): pid=442604 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926719.521:57655): pid=442604 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926719.526:57656): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926719.526:57657): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764926719.544:57658): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926719.544:57659): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926719.604:57660): pid=442620 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926719.604:57661): pid=442620 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926719.605:57662): pid=442620 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926719.607:57663): pid=442620 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926719.676:57664): pid=442602 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926719.677:57665): pid=442602 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926719.681:57666): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926719.681:57667): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926719.707:57668): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926719.707:57669): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926719.709:57670): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442635 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926719.741:57671): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926719.741:57672): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926720.209:57673): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926720.209:57674): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926720.210:57675): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442680 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926720.240:57676): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926720.240:57677): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926720.256:57678): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926720.257:57679): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926720.258:57680): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442695 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926720.262:57681): pid=442620 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926720.262:57682): pid=442620 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926720.292:57683): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926720.292:57684): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926720.313:57685): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926720.313:57686): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926720.315:57687): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442714 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926720.328:57688): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926720.328:57689): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764926720.369:57690): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926720.369:57691): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926720.380:57692): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926720.381:57693): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926720.382:57694): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442727 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926720.412:57695): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926720.413:57696): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926720.424:57697): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926720.424:57698): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926720.426:57699): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442741 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926720.757:57700): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926720.757:57701): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926720.771:57702): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926720.771:57703): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926720.772:57704): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442759 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926720.801:57705): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926720.801:57706): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926721.071:57707): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926721.071:57708): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926721.127:57709): pid=442773 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926721.127:57710): pid=442773 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926721.129:57711): pid=442773 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926721.133:57712): pid=442773 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926721.137:57713): pid=442773 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926721.137:57714): pid=442773 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926721.141:57715): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926721.141:57716): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764926721.493:57717): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926721.494:57718): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926721.495:57719): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442788 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926721.527:57720): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926721.527:57721): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926721.544:57722): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926721.544:57723): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926721.546:57724): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442801 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926721.583:57725): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926721.583:57726): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926721.607:57727): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926721.607:57728): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926721.609:57729): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442820 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926721.661:57730): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926721.661:57731): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926721.674:57732): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926721.674:57733): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926721.676:57734): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442833 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926721.707:57735): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926721.708:57736): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926721.720:57737): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926721.720:57738): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926721.722:57739): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442847 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926721.789:57740): pid=442863 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926721.790:57741): pid=442863 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77627866776A7877777979677A676E77617470627675696F6469767565727467203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732312E353239383937372D3932332D3131303938333132303737343932382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926721.790:57742): pid=442863 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926721.797:57743): pid=442863 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=SERVICE_START msg=audit(1764926721.811:57744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926721.814:57745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926721.818:57746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926721.821:57747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926721.824:57748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926721.828:57749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926722.064:57750): pid=442863 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926722.064:57751): pid=442863 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926722.071:57752): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926722.071:57753): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926722.083:57754): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926722.083:57755): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926722.085:57756): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=442972 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926722.117:57757): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926722.118:57758): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_STOP msg=audit(1764926722.158:57759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926722.175:57760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926722.204:57761): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926722.204:57762): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926722.206:57763): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443031 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=SERVICE_STOP msg=audit(1764926722.221:57764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926722.231:57765): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926722.231:57766): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926722.244:57767): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926722.244:57768): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926722.246:57769): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443052 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926722.279:57770): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926722.279:57771): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_STOP msg=audit(1764926722.282:57772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926722.312:57773): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926722.312:57774): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926722.313:57775): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443078 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926722.354:57776): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926722.354:57777): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926722.367:57778): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926722.367:57779): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926722.369:57780): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443092 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=SERVICE_STOP msg=audit(1764926722.392:57781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926722.396:57782): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926722.396:57783): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926722.411:57784): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926722.411:57785): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926722.413:57786): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443108 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926722.473:57787): pid=443124 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926722.474:57788): pid=443124 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D677777617872676875796179696C76716A616166666479666D6E6967627674203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732322E323333363634352D3935302D3234343432383136313932333034342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926722.474:57789): pid=443124 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926722.479:57790): pid=443124 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=SERVICE_STOP msg=audit(1764926722.502:57791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926722.681:57792): pid=443124 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926722.682:57793): pid=443124 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926722.684:57794): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926722.684:57795): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926723.112:57796): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926723.112:57797): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926723.114:57798): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443134 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926723.144:57799): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926723.144:57800): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926723.195:57801): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926723.195:57802): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926723.196:57803): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443148 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926723.224:57804): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926723.224:57805): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926723.242:57806): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926723.242:57807): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926723.243:57808): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443161 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926723.274:57809): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926723.274:57810): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926723.303:57811): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926723.303:57812): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926723.304:57813): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443180 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926723.355:57814): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926723.355:57815): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926723.361:57816): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926723.362:57817): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926723.363:57818): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443193 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926723.389:57819): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926723.390:57820): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926723.402:57821): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926723.403:57822): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926723.404:57823): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443207 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926723.459:57824): pid=443223 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926723.460:57825): pid=443223 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74796F6767796B6D6D6970797173686F61796E6E64686D786A677A70766F7266203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732332E323330363036332D3937342D3132383435353731323132333136332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926723.460:57826): pid=443223 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926723.464:57827): pid=443223 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926723.684:57828): pid=443223 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926723.684:57829): pid=443223 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926723.688:57830): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926723.688:57831): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926723.703:57832): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926723.703:57833): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926723.705:57834): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443227 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926723.730:57835): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926723.730:57836): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926723.848:57837): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926723.848:57838): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926723.849:57839): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443241 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926723.880:57840): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926723.880:57841): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926723.894:57842): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926723.894:57843): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926723.896:57844): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443254 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926723.930:57845): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926723.930:57846): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926723.950:57847): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926723.950:57848): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926723.951:57849): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443273 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926723.994:57850): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926723.994:57851): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926724.006:57852): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926724.006:57853): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926724.007:57854): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443286 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926724.036:57855): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926724.036:57856): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926724.050:57857): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926724.050:57858): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926724.051:57859): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443300 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926724.273:57860): pid=443318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926724.279:57861): pid=443317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=443318 suid=74 rport=43052 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926724.279:57862): pid=443317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=443318 suid=74 rport=43052 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1764926724.335:57863): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926724.335:57864): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926724.348:57865): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926724.348:57866): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926724.350:57867): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443321 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926724.382:57868): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926724.382:57869): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926724.456:57870): pid=443317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=443318 suid=74 rport=43052 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926724.457:57871): pid=443317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443318 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926724.457:57872): pid=443317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=192.227.128.3 addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926724.458:57873): pid=443317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926724.458:57874): pid=443317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926724.540:57875): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926724.540:57876): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926724.541:57877): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443335 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926724.571:57878): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926724.571:57879): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926724.583:57880): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926724.583:57881): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926724.584:57882): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443348 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926724.620:57883): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926724.620:57884): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926724.643:57885): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926724.643:57886): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926724.644:57887): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443367 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926724.689:57888): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926724.689:57889): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926724.703:57890): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926724.704:57891): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926724.705:57892): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443380 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926724.739:57893): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926724.739:57894): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926724.755:57895): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926724.755:57896): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926724.756:57897): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443394 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926724.823:57898): pid=443410 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926724.823:57899): pid=443410 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67626E796E657069707770666F65717670696C6D7971786F70797776726E796F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732342E353733383633352D313032352D32363139383531383736343636342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926724.824:57900): pid=443410 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926724.828:57901): pid=443410 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926725.059:57902): pid=443410 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926725.060:57903): pid=443410 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926725.063:57904): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926725.063:57905): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926725.076:57906): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926725.076:57907): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926725.077:57908): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443413 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926725.109:57909): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926725.109:57910): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926725.215:57911): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926725.215:57912): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926725.217:57913): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443427 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926725.245:57914): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926725.245:57915): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926725.260:57916): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926725.260:57917): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926725.261:57918): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443440 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926725.298:57919): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926725.299:57920): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926725.331:57921): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926725.331:57922): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926725.333:57923): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443459 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926725.381:57924): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926725.381:57925): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926725.393:57926): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926725.393:57927): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926725.395:57928): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443472 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926725.428:57929): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926725.428:57930): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926725.443:57931): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926725.443:57932): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926725.444:57933): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443486 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926725.509:57934): pid=443502 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926725.509:57935): pid=443502 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79786263786B746B616F696965736573796274736D7579766F6771747A6E6E61203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732352E323437383436342D313034392D3238303933303736333131313232322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926725.510:57936): pid=443502 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926725.513:57937): pid=443502 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926725.742:57938): pid=443502 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926725.742:57939): pid=443502 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926725.747:57940): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926725.747:57941): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926725.771:57942): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926725.771:57943): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926725.773:57944): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443507 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926725.815:57945): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926725.815:57946): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926725.830:57947): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926725.830:57948): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926725.831:57949): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443520 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926725.859:57950): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926725.859:57951): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926725.874:57952): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926725.875:57953): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926725.876:57954): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443534 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926725.937:57955): pid=443550 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926725.937:57956): pid=443550 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69797A6A7065647574696F7677666661746A6F756E6F6775717969717A776E6C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732352E323437383436342D313034392D3238303933303736333131313232322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926725.938:57957): pid=443550 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926725.941:57958): pid=443550 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926726.191:57959): pid=443550 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926726.191:57960): pid=443550 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926726.195:57961): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926726.195:57962): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926726.207:57963): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926726.207:57964): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926726.208:57965): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443553 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926726.237:57966): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926726.237:57967): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926726.263:57968): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926726.263:57969): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926726.264:57970): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443567 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926726.295:57971): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926726.295:57972): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926726.305:57973): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926726.305:57974): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926726.307:57975): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443580 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926726.344:57976): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926726.344:57977): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926726.368:57978): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926726.368:57979): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926726.370:57980): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443599 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926726.417:57981): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926726.417:57982): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926726.428:57983): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926726.428:57984): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926726.429:57985): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443612 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926726.464:57986): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926726.464:57987): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926726.474:57988): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926726.474:57989): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926726.476:57990): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443626 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926726.544:57991): pid=443642 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926726.544:57992): pid=443642 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75756E68716F726571796463736E6262647271626E6C70726F736773716B6177203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732362E3239373134312D313034392D39353038343333313434343235322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926726.545:57993): pid=443642 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926726.549:57994): pid=443642 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926726.773:57995): pid=443642 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926726.774:57996): pid=443642 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926726.778:57997): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926726.778:57998): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926726.803:57999): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926726.803:58000): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926726.805:58001): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443647 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926726.858:58002): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926726.858:58003): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926726.877:58004): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926726.877:58005): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926726.878:58006): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443660 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926726.910:58007): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926726.910:58008): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926726.921:58009): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926726.921:58010): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926726.922:58011): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443674 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926726.986:58012): pid=443690 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926726.987:58013): pid=443690 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69706B7172687863736D646F6B63686D6E79766A646C6A626269626A74797265203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732362E3239373134312D313034392D39353038343333313434343235322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926726.987:58014): pid=443690 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926726.990:58015): pid=443690 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926727.211:58016): pid=443690 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926727.211:58017): pid=443690 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926727.214:58018): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926727.214:58019): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926727.226:58020): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926727.226:58021): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926727.227:58022): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443693 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926727.247:58023): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926727.247:58024): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926727.313:58025): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926727.313:58026): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926727.314:58027): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443707 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926727.338:58028): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926727.338:58029): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926727.352:58030): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926727.352:58031): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926727.353:58032): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443720 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926727.387:58033): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926727.387:58034): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926727.424:58035): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926727.424:58036): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926727.425:58037): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443739 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926727.481:58038): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926727.481:58039): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926727.500:58040): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926727.500:58041): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926727.500:58042): pid=443753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764926727.501:58043): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443754 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926727.531:58044): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926727.531:58045): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_SESSION msg=audit(1764926727.537:58046): pid=443752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=443753 suid=74 rport=46513 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926727.538:58047): pid=443752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=443753 suid=74 rport=46513 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764926727.544:58048): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926727.544:58049): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926727.545:58050): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443768 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926727.596:58051): pid=443784 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926727.597:58052): pid=443784 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76766E7676636F7076726E6E74636A6278687177647963666675656F6B716C7A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732372E333432323536352D313131382D3139313433353133363033383732322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926727.597:58053): pid=443784 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926727.599:58054): pid=443784 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926727.832:58055): pid=443752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=443753 suid=74 rport=46513 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926727.832:58056): pid=443752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443753 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926727.833:58057): pid=443752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=12.189.234.28 addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926727.833:58058): pid=443752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926727.833:58059): pid=443752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1764926727.839:58060): pid=443784 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926727.840:58061): pid=443784 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926727.844:58062): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926727.844:58063): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926727.857:58064): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926727.857:58065): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926727.858:58066): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443787 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926727.886:58067): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926727.886:58068): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926727.986:58069): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926727.986:58070): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926727.987:58071): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443801 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926728.010:58072): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926728.011:58073): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926728.028:58074): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926728.028:58075): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926728.030:58076): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443814 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926728.059:58077): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926728.059:58078): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926728.090:58079): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926728.090:58080): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926728.092:58081): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443833 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926728.139:58082): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926728.139:58083): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926728.150:58084): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926728.150:58085): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926728.151:58086): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443846 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926728.180:58087): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926728.180:58088): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926728.191:58089): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926728.192:58090): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926728.193:58091): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443860 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926728.240:58092): pid=443876 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926728.241:58093): pid=443876 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6E717677676B717574616D6C656569657063766B6D697779757861656F726F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732382E303134343035352D313134322D3237393531363539393437303339312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926728.241:58094): pid=443876 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926728.245:58095): pid=443876 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926728.456:58096): pid=443876 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926728.457:58097): pid=443876 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926728.460:58098): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926728.460:58099): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926728.483:58100): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926728.483:58101): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926728.484:58102): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443881 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926728.540:58103): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926728.540:58104): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926728.553:58105): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926728.553:58106): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926728.555:58107): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443894 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926728.584:58108): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926728.584:58109): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926728.595:58110): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926728.595:58111): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926728.596:58112): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443908 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926728.664:58113): pid=443924 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926728.664:58114): pid=443924 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6273686362736A67717A65737177757770746A6E716669656A7770756E6F6F61203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732382E303134343035352D313134322D3237393531363539393437303339312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926728.665:58115): pid=443924 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926728.669:58116): pid=443924 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926728.903:58117): pid=443924 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926728.904:58118): pid=443924 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926728.907:58119): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926728.907:58120): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926728.923:58121): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926728.923:58122): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926728.924:58123): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443927 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926728.957:58124): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926728.957:58125): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926729.036:58126): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926729.036:58127): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926729.037:58128): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443941 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926729.071:58129): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926729.071:58130): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926729.085:58131): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926729.085:58132): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926729.086:58133): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443954 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926729.124:58134): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926729.124:58135): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926729.148:58136): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926729.148:58137): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926729.149:58138): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443973 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926729.201:58139): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926729.201:58140): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926729.214:58141): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926729.214:58142): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926729.216:58143): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=443986 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926729.247:58144): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926729.247:58145): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926729.258:58146): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926729.258:58147): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926729.260:58148): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444000 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926729.311:58149): pid=444016 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926729.311:58150): pid=444016 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A73776766717078676C65676166766278776377787379716C7061756B687068203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732392E3037333731312D313137382D32363539353931363434363533342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926729.312:58151): pid=444016 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926729.315:58152): pid=444016 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926729.534:58153): pid=444016 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926729.535:58154): pid=444016 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926729.539:58155): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926729.539:58156): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926729.562:58157): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926729.562:58158): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926729.563:58159): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444021 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926729.603:58160): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926729.603:58161): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926729.617:58162): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926729.617:58163): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926729.618:58164): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444034 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926729.647:58165): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926729.647:58166): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926729.663:58167): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926729.663:58168): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926729.665:58169): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444048 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926729.721:58170): pid=444064 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926729.721:58171): pid=444064 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647A65656C6F7479617879676D777269756B62786A7A7A777363746E7666626E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363732392E3037333731312D313137382D32363539353931363434363533342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926729.722:58172): pid=444064 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926729.725:58173): pid=444064 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926729.959:58174): pid=444064 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926729.960:58175): pid=444064 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926729.963:58176): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926729.963:58177): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926729.976:58178): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926729.976:58179): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926729.977:58180): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444067 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926730.005:58181): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926730.005:58182): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926730.082:58183): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926730.082:58184): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926730.084:58185): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444081 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926730.112:58186): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926730.112:58187): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926730.126:58188): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926730.126:58189): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926730.127:58190): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444094 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926730.159:58191): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926730.160:58192): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926730.183:58193): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926730.183:58194): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926730.184:58195): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444113 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926730.242:58196): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926730.242:58197): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926730.260:58198): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926730.260:58199): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926730.261:58200): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444126 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926730.288:58201): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926730.288:58202): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926730.303:58203): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926730.303:58204): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926730.305:58205): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444140 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926730.358:58206): pid=444156 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926730.359:58207): pid=444156 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D776461756470636E6376746B6F6E69656562796D736368777274726B756E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733302E313136313430382D313231342D35353631363936363632383337342F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926730.359:58208): pid=444156 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926730.362:58209): pid=444156 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=BPF msg=audit(1764926731.018:58210): prog-id=2268 op=LOAD type=BPF msg=audit(1764926731.018:58211): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926731.019:58212): prog-id=2269 op=LOAD type=BPF msg=audit(1764926731.019:58213): prog-id=2270 op=LOAD type=BPF msg=audit(1764926731.019:58214): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926731.019:58215): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926731.021:58216): prog-id=2271 op=LOAD type=BPF msg=audit(1764926731.022:58217): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926731.022:58218): prog-id=2272 op=LOAD type=BPF msg=audit(1764926731.022:58219): prog-id=2273 op=LOAD type=BPF msg=audit(1764926731.022:58220): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926731.022:58221): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926731.030:58222): prog-id=2274 op=LOAD type=BPF msg=audit(1764926731.030:58223): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926731.031:58224): prog-id=2275 op=LOAD type=BPF msg=audit(1764926731.031:58225): prog-id=2276 op=LOAD type=BPF msg=audit(1764926731.031:58226): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926731.031:58227): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926731.032:58228): prog-id=2277 op=LOAD type=BPF msg=audit(1764926731.032:58229): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764926731.111:58230): pid=444156 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926731.112:58231): pid=444156 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926731.117:58232): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926731.117:58233): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926731.406:58234): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926731.406:58235): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926731.407:58236): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444198 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926731.441:58237): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926731.441:58238): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926731.508:58239): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926731.508:58240): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926731.510:58241): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444212 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926731.540:58242): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926731.540:58243): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926731.554:58244): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926731.554:58245): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926731.556:58246): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444225 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926731.593:58247): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926731.593:58248): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926731.622:58249): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926731.622:58250): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926731.623:58251): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926731.674:58252): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926731.674:58253): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926731.687:58254): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926731.687:58255): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926731.688:58256): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444257 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926731.718:58257): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926731.718:58258): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926731.741:58259): pid=444271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926731.743:58260): pid=444197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=444271 suid=74 rport=56336 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926731.743:58261): pid=444197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=444271 suid=74 rport=56336 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764926731.752:58262): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926731.752:58263): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926731.754:58264): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444272 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926731.809:58265): pid=444288 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926731.809:58266): pid=444288 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706E7A6D75696A62666E7A77626D77706D61666F6B786670696B6E6164616D68203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733312E353435353337322D313233382D3134313835323436343836313230372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926731.810:58267): pid=444288 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926731.815:58268): pid=444288 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926732.060:58269): pid=444288 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926732.061:58270): pid=444288 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926732.065:58271): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926732.065:58272): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926732.103:58273): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926732.104:58274): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926732.105:58275): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444293 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926732.145:58276): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926732.145:58277): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926732.166:58278): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926732.166:58279): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926732.167:58280): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444306 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926732.192:58281): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926732.192:58282): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926732.244:58283): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926732.244:58284): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926732.246:58285): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444320 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926732.306:58286): pid=444336 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926732.307:58287): pid=444336 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C7165727A737A66737573707670707A736A706B776275687573786C767A77203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733312E353435353337322D313233382D3134313835323436343836313230372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926732.307:58288): pid=444336 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926732.310:58289): pid=444336 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926732.536:58290): pid=444336 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926732.536:58291): pid=444336 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926732.540:58292): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926732.540:58293): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926732.559:58294): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926732.559:58295): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926732.560:58296): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444339 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926732.585:58297): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926732.585:58298): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926732.685:58299): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926732.685:58300): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926732.686:58301): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444353 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926732.716:58302): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926732.716:58303): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926732.731:58304): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926732.731:58305): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926732.732:58306): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444366 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926732.766:58307): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926732.766:58308): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926732.795:58309): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926732.795:58310): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926732.797:58311): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444385 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926732.843:58312): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926732.843:58313): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926732.856:58314): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926732.856:58315): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926732.857:58316): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444398 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926732.885:58317): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926732.885:58318): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926732.896:58319): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926732.896:58320): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926732.898:58321): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444413 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926732.907:58322): pid=444420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_ACCT msg=audit(1764926732.959:58323): pid=444430 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926732.960:58324): pid=444430 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6470626A6C6B61716D78676C687A79756F6F6A6E756C70766575796E7A716E69203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733322E3731383532372D313237342D3236373633353039373738383034332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926732.960:58325): pid=444430 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926732.962:58326): pid=444430 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRYPTO_SESSION msg=audit(1764926733.156:58327): pid=444412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=444420 suid=74 rport=46154 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926733.157:58328): pid=444412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=444420 suid=74 rport=46154 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1764926733.196:58329): pid=444430 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926733.197:58330): pid=444430 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926733.201:58331): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926733.201:58332): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926733.414:58333): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926733.414:58334): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926733.416:58335): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444435 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926733.475:58336): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926733.475:58337): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926733.490:58338): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926733.490:58339): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926733.492:58340): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444448 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926733.521:58341): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926733.521:58342): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926733.534:58343): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926733.535:58344): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926733.536:58345): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444462 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926733.589:58346): pid=444478 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926733.590:58347): pid=444478 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6775686B766B716C6F776E7362626A6B716D7677666E7A616C7A697267626E75203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733322E3731383532372D313237342D3236373633353039373738383034332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926733.590:58348): pid=444478 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926733.593:58349): pid=444478 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926733.816:58350): pid=444478 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926733.816:58351): pid=444478 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926733.819:58352): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926733.819:58353): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926733.831:58354): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926733.831:58355): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926733.832:58356): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444481 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926733.851:58357): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926733.851:58358): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926734.177:58359): pid=444197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=444271 suid=74 rport=56336 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926734.177:58360): pid=444197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444271 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926734.178:58361): pid=444197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926734.178:58362): pid=444197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926734.179:58363): pid=444197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926734.431:58364): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926734.431:58365): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926734.432:58366): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444496 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926734.462:58367): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926734.462:58368): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926734.482:58369): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926734.482:58370): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926734.484:58371): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444509 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926734.502:58372): pid=444412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=444420 suid=74 rport=46154 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926734.502:58373): pid=444412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444420 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926734.503:58374): pid=444412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.225.21 addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926734.503:58375): pid=444412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926734.503:58376): pid=444412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1764926734.516:58377): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926734.516:58378): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926734.549:58379): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926734.550:58380): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926734.551:58381): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444528 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926734.618:58382): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926734.618:58383): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926734.630:58384): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926734.630:58385): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926734.632:58386): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444541 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926734.649:58387): pid=444547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926734.650:58388): pid=444495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=444547 suid=74 rport=56362 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926734.651:58389): pid=444495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=444547 suid=74 rport=56362 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1764926734.667:58390): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926734.667:58391): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926734.677:58392): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926734.677:58393): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926734.678:58394): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444556 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926734.728:58395): pid=444572 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926734.729:58396): pid=444572 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716D666D6C7368647A636E7462737A6A7673697778796F6C6E746D61626B6F74203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733342E343637373531352D313331302D3230343632343539363736363137302F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926734.729:58397): pid=444572 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926734.732:58398): pid=444572 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=BPF msg=audit(1764926735.323:58399): prog-id=2278 op=LOAD type=BPF msg=audit(1764926735.323:58400): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926735.323:58401): prog-id=2279 op=LOAD type=BPF msg=audit(1764926735.323:58402): prog-id=2280 op=LOAD type=BPF msg=audit(1764926735.323:58403): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926735.323:58404): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926735.326:58405): prog-id=2281 op=LOAD type=BPF msg=audit(1764926735.326:58406): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926735.327:58407): prog-id=2282 op=LOAD type=BPF msg=audit(1764926735.327:58408): prog-id=2283 op=LOAD type=BPF msg=audit(1764926735.327:58409): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926735.327:58410): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926735.336:58411): prog-id=2284 op=LOAD type=BPF msg=audit(1764926735.336:58412): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926735.336:58413): prog-id=2285 op=LOAD type=BPF msg=audit(1764926735.337:58414): prog-id=2286 op=LOAD type=BPF msg=audit(1764926735.337:58415): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926735.337:58416): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926735.338:58417): prog-id=2287 op=LOAD type=BPF msg=audit(1764926735.338:58418): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1764926735.420:58419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926735.420:58420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926735.463:58421): pid=444572 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926735.463:58422): pid=444572 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926735.467:58423): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926735.467:58424): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926735.480:58425): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926735.480:58426): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926735.481:58427): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444618 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926735.506:58428): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926735.506:58429): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926735.807:58430): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926735.807:58431): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926735.809:58432): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444632 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926735.839:58433): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926735.839:58434): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926735.849:58435): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926735.849:58436): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926735.850:58437): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444645 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926735.884:58438): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926735.884:58439): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926735.911:58440): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926735.911:58441): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926735.912:58442): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444664 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926735.957:58443): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926735.957:58444): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926735.981:58445): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926735.981:58446): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926735.983:58447): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444677 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926736.011:58448): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926736.011:58449): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926736.024:58450): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926736.024:58451): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926736.027:58452): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444691 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926736.097:58453): pid=444707 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926736.098:58454): pid=444707 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676D616875797966767A63686C676E71686364756269796D6E6B616D63746277203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733352E383431343937342D313334302D3236373337303135313134383930302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926736.099:58455): pid=444707 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926736.103:58456): pid=444707 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926736.182:58457): pid=444495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=444547 suid=74 rport=56362 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926736.182:58458): pid=444495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444547 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926736.183:58459): pid=444495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926736.184:58460): pid=444495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444495 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926736.184:58461): pid=444495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1764926736.378:58462): pid=444707 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926736.378:58463): pid=444707 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926736.380:58464): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926736.381:58465): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926736.397:58466): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926736.397:58467): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926736.398:58468): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444711 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926736.424:58469): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926736.425:58470): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926736.532:58471): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926736.533:58472): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926736.534:58473): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444725 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926736.563:58474): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926736.563:58475): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926736.576:58476): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926736.577:58477): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926736.578:58478): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444738 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926736.612:58479): pid=444756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926736.613:58480): pid=444710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=444756 suid=74 rport=56378 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926736.613:58481): pid=444710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=444756 suid=74 rport=56378 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1764926736.614:58482): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926736.614:58483): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926736.649:58484): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926736.649:58485): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926736.650:58486): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444758 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926736.698:58487): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926736.699:58488): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926736.710:58489): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926736.710:58490): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926736.712:58491): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444771 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926736.741:58492): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926736.741:58493): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926736.754:58494): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926736.754:58495): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926736.756:58496): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444785 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926736.817:58497): pid=444801 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926736.817:58498): pid=444801 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676A716F716E6E746E747272716D6A7A78686478676F676A6F697378756F6366203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733362E353635313235322D313336342D35363438343837343035393230372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926736.818:58499): pid=444801 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926736.821:58500): pid=444801 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926737.040:58501): pid=444801 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926737.040:58502): pid=444801 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926737.044:58503): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926737.044:58504): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926737.062:58505): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926737.062:58506): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926737.064:58507): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444804 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926737.099:58508): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926737.099:58509): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926737.111:58510): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926737.111:58511): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926737.113:58512): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444817 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926737.144:58513): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926737.144:58514): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926737.165:58515): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926737.165:58516): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926737.166:58517): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444831 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926737.223:58518): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926737.223:58519): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926737.236:58520): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926737.236:58521): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926737.238:58522): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444844 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926737.266:58523): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926737.267:58524): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926737.281:58525): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926737.281:58526): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926737.283:58527): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444858 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926737.344:58528): pid=444874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926737.344:58529): pid=444874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65767072776963666C6D76616F62656F656A73686E636970676F766571696578203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733362E353635313235322D313336342D35363438343837343035393230372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926737.345:58530): pid=444874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926737.346:58531): pid=444874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926737.562:58532): pid=444874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926737.562:58533): pid=444874 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926737.565:58534): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926737.565:58535): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926737.580:58536): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926737.580:58537): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926737.581:58538): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444877 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926737.606:58539): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926737.606:58540): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926738.333:58541): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926738.333:58542): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926738.333:58543): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444891 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926738.360:58544): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926738.360:58545): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926738.374:58546): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926738.374:58547): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926738.375:58548): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444904 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926738.408:58549): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926738.409:58550): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926738.430:58551): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926738.430:58552): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926738.431:58553): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444923 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926738.481:58554): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926738.481:58555): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926738.495:58556): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926738.495:58557): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926738.496:58558): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444936 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926738.526:58559): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926738.526:58560): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926738.549:58561): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926738.549:58562): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926738.550:58563): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444950 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926738.604:58564): pid=444710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=444756 suid=74 rport=56378 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926738.605:58565): pid=444710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444756 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926738.605:58566): pid=444710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926738.606:58567): pid=444710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926738.606:58568): pid=444710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764926738.614:58569): pid=444966 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926738.615:58570): pid=444966 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79656A727661746C6B7178676E68647A7374627779646C74756E736462667561203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733382E333633303039372D313431352D3232383638363836373238363031332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926738.616:58571): pid=444966 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926738.619:58572): pid=444966 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926738.890:58573): pid=444966 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926738.890:58574): pid=444966 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926738.894:58575): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926738.894:58576): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926738.907:58577): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926738.908:58578): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926738.909:58579): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444970 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926738.930:58580): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926738.930:58581): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926739.070:58582): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926739.070:58583): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926739.072:58584): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444984 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926739.100:58585): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926739.101:58586): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926739.117:58587): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926739.117:58588): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926739.119:58589): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444997 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926739.155:58590): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926739.155:58591): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926739.164:58592): pid=445016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926739.165:58593): pid=444969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=445016 suid=74 rport=56398 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926739.166:58594): pid=444969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=445016 suid=74 rport=56398 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764926739.185:58595): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926739.185:58596): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926739.187:58597): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445017 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926739.224:58598): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926739.224:58599): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926739.237:58600): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926739.238:58601): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926739.239:58602): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445030 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926739.262:58603): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926739.262:58604): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926739.274:58605): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926739.274:58606): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926739.275:58607): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445044 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926739.335:58608): pid=445060 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926739.336:58609): pid=445060 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6378747367646770736E7964767A6961696169717A717072726B646174736C6B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733392E3130393234312D313433392D3136343334353433333831343039302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926739.337:58610): pid=445060 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926739.339:58611): pid=445060 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926739.551:58612): pid=445060 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926739.552:58613): pid=445060 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926739.554:58614): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926739.554:58615): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926739.572:58616): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926739.572:58617): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926739.573:58618): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445065 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926739.602:58619): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926739.602:58620): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926739.617:58621): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926739.618:58622): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926739.619:58623): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445078 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926739.643:58624): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926739.643:58625): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926739.668:58626): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926739.669:58627): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926739.670:58628): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445092 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926739.708:58629): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926739.708:58630): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926739.723:58631): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926739.723:58632): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926739.724:58633): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445105 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926739.750:58634): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926739.750:58635): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926739.772:58636): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926739.772:58637): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926739.774:58638): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445119 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926739.824:58639): pid=445135 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926739.825:58640): pid=445135 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7876666274676E646C6763716D7372716862636F69726A6E706A6F6667617763203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363733392E3130393234312D313433392D3136343334353433333831343039302F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926739.825:58641): pid=445135 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926739.828:58642): pid=445135 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926740.072:58643): pid=445135 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926740.072:58644): pid=445135 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926740.075:58645): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926740.075:58646): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926740.087:58647): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926740.088:58648): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926740.089:58649): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445138 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926740.116:58650): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926740.116:58651): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926740.271:58652): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926740.271:58653): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926740.273:58654): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445152 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926740.303:58655): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926740.303:58656): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926740.318:58657): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926740.318:58658): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926740.319:58659): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445165 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926740.351:58660): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926740.351:58661): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926740.373:58662): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926740.373:58663): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926740.374:58664): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445184 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926740.423:58665): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926740.423:58666): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926740.438:58667): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926740.438:58668): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926740.439:58669): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445197 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926740.470:58670): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926740.471:58671): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926740.486:58672): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926740.486:58673): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926740.488:58674): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445211 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926740.551:58675): pid=445227 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926740.552:58676): pid=445227 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706E70767962766C64696E7979797277656C7077797A637678686E7067736C61203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363734302E333037343732352D313438342D3237373132353735343734373733322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926740.553:58677): pid=445227 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926740.556:58678): pid=445227 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926740.836:58679): pid=445227 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926740.837:58680): pid=445227 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926740.840:58681): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926740.840:58682): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926740.853:58683): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926740.853:58684): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926740.854:58685): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445230 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926740.884:58686): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926740.884:58687): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926740.966:58688): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926740.966:58689): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926740.967:58690): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926740.995:58691): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926740.996:58692): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926741.015:58693): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926741.015:58694): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926741.016:58695): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445257 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926741.053:58696): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926741.054:58697): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926741.080:58698): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926741.080:58699): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926741.081:58700): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445276 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926741.124:58701): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926741.124:58702): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926741.137:58703): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926741.137:58704): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926741.138:58705): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445289 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926741.167:58706): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926741.167:58707): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926741.182:58708): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926741.182:58709): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926741.183:58710): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445303 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926741.245:58711): pid=445319 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926741.245:58712): pid=445319 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6A75786E757A74686F6A706D6A6A6D697263746C677861716873756B706876203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363734302E393938383930322D313530382D3132363333383131373736373836322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926741.246:58713): pid=445319 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926741.248:58714): pid=445319 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926741.306:58715): pid=444969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=445016 suid=74 rport=56398 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926741.306:58716): pid=444969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445016 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926741.307:58717): pid=444969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926741.308:58718): pid=444969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=444969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926741.308:58719): pid=444969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1764926741.450:58720): pid=445319 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926741.450:58721): pid=445319 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926741.454:58722): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926741.454:58723): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926741.471:58724): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926741.471:58725): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926741.472:58726): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445323 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926741.501:58727): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926741.501:58728): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926741.512:58729): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926741.512:58730): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926741.513:58731): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445336 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926741.537:58732): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926741.537:58733): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926741.556:58734): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926741.556:58735): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926741.557:58736): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445350 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926741.593:58737): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926741.593:58738): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926741.606:58739): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926741.606:58740): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926741.607:58741): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445363 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926741.634:58742): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926741.634:58743): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926741.651:58744): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926741.651:58745): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926741.652:58746): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445377 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926741.710:58747): pid=445393 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926741.711:58748): pid=445393 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F73787466696A6F7577766F77716F7468656D69697A73776169626C75787561203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363734302E393938383930322D313530382D3132363333383131373736373836322F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926741.711:58749): pid=445393 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926741.714:58750): pid=445393 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926741.759:58751): pid=445396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926741.760:58752): pid=445322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=445396 suid=74 rport=55772 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926741.760:58753): pid=445322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=445396 suid=74 rport=55772 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1764926741.929:58754): pid=445393 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926741.929:58755): pid=445393 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926741.932:58756): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926741.932:58757): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926742.414:58758): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926742.414:58759): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926742.415:58760): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445397 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926742.447:58761): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926742.447:58762): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926742.790:58763): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926742.790:58764): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926742.791:58765): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445411 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926742.819:58766): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926742.820:58767): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926742.832:58768): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926742.832:58769): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926742.833:58770): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445424 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926742.865:58771): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926742.866:58772): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926743.035:58773): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926743.035:58774): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926743.036:58775): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445443 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926743.087:58776): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926743.087:58777): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926743.101:58778): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926743.102:58779): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926743.103:58780): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445456 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926743.126:58781): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926743.126:58782): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926743.140:58783): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926743.140:58784): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926743.141:58785): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445470 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926743.191:58786): pid=445486 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926743.191:58787): pid=445486 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D66736E7172777A6F657579796E786E72746F7262696F736277646B67636476203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363734322E383232393938352D313535392D3134343439313034343638343138382F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F646174612E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926743.192:58788): pid=445486 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926743.195:58789): pid=445486 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926743.428:58790): pid=445486 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926743.429:58791): pid=445486 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926743.432:58792): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926743.432:58793): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926743.446:58794): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926743.446:58795): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926743.448:58796): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445489 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926743.476:58797): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926743.476:58798): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926743.606:58799): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926743.606:58800): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926743.607:58801): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445503 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926743.630:58802): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926743.630:58803): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926743.644:58804): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926743.644:58805): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926743.645:58806): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445516 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926743.669:58807): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926743.669:58808): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926743.747:58809): pid=445322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=445396 suid=74 rport=55772 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926743.747:58810): pid=445322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445396 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926743.748:58811): pid=445322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926743.748:58812): pid=445322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445322 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926743.748:58813): pid=445322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926743.838:58814): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926743.838:58815): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926743.839:58816): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445535 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926743.882:58817): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926743.882:58818): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926743.896:58819): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926743.896:58820): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926743.898:58821): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445548 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926743.920:58822): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926743.920:58823): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926743.945:58824): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926743.945:58825): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926743.946:58826): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445562 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926744.002:58827): pid=445578 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926744.002:58828): pid=445578 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69777177737571677A6279766561676A7A6C7466746F787966726B646968756F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363734332E36333639332D313538362D33393538303534333638313132362F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F686173682E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926744.003:58829): pid=445578 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926744.005:58830): pid=445578 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926744.240:58831): pid=445578 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926744.240:58832): pid=445578 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926744.244:58833): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926744.244:58834): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926744.510:58835): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926744.510:58836): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926744.511:58837): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445581 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926744.535:58838): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926744.535:58839): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926744.724:58840): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926744.724:58841): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926744.725:58842): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445595 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926744.749:58843): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926744.749:58844): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926744.762:58845): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926744.762:58846): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926744.763:58847): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445608 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926744.795:58848): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926744.795:58849): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926744.993:58850): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926744.993:58851): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926744.995:58852): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445627 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926745.042:58853): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926745.042:58854): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926745.070:58855): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926745.071:58856): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926745.072:58857): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445640 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926745.099:58858): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926745.099:58859): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926745.113:58860): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926745.113:58861): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926745.115:58862): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445654 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926745.167:58863): pid=445670 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926745.167:58864): pid=445670 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6774756166706E61677879716C6863767A656165676B736A7675677962636771203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363734342E373531393439382D313631332D3132373838343339393039333739362F416E736962616C6C5A5F706F646D616E5F636F6E7461696E65725F696E666F2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926745.168:58865): pid=445670 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926745.170:58866): pid=445670 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926746.235:58867): pid=445670 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926746.236:58868): pid=445670 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926746.240:58869): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926746.240:58870): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926746.327:58871): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926746.327:58872): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926746.328:58873): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445700 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926746.357:58874): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926746.357:58875): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926749.057:58876): pid=445715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926749.203:58877): pid=445714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=445715 suid=74 rport=7937 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926749.203:58878): pid=445714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=445715 suid=74 rport=7937 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926750.037:58879): pid=445714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=445715 suid=74 rport=7937 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926750.037:58880): pid=445714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445715 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926750.038:58881): pid=445714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.228.135.173 addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926750.038:58882): pid=445714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926750.038:58883): pid=445714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926753.012:58884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926753.015:58885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926753.020:58886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926753.025:58887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926753.031:58888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926753.036:58889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926753.268:58890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926753.396:58891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926753.424:58892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926753.447:58893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926753.463:58894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926753.487:58895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926754.444:58896): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926754.444:58897): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926754.446:58898): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445909 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926754.483:58899): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926754.483:58900): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926754.496:58901): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926754.496:58902): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926754.497:58903): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445923 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926754.535:58904): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926754.535:58905): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926755.215:58906): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926755.215:58907): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926755.216:58908): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445946 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926755.258:58909): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926755.258:58910): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926755.274:58911): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926755.274:58912): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926755.275:58913): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445959 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926755.300:58914): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926755.301:58915): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926755.323:58916): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926755.324:58917): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926755.325:58918): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=445973 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926755.376:58919): pid=445989 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926755.376:58920): pid=445989 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6E767A6D73767861636E757A63706E776E6773746D7362666D797273706178203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363735342E343835313233362D313635322D35383935363531383331383337312F416E736962616C6C5A5F6564706D5F636F6E7461696E65725F6D616E6167652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926755.378:58921): pid=445989 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926755.382:58922): pid=445989 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926756.290:58923): pid=446086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_END msg=audit(1764926756.411:58924): pid=445989 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926756.412:58925): pid=445989 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926756.415:58926): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926756.416:58927): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926756.430:58928): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926756.430:58929): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926756.431:58930): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446100 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926756.456:58931): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926756.457:58932): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_SESSION msg=audit(1764926756.534:58933): pid=446085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=446086 suid=74 rport=58874 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926756.534:58934): pid=446085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=446086 suid=74 rport=58874 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764926757.079:58935): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926757.079:58936): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.081:58937): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446114 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926757.110:58938): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926757.111:58939): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926757.120:58940): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926757.120:58941): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.122:58942): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446127 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926757.155:58943): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926757.155:58944): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926757.181:58945): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926757.181:58946): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.182:58947): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446146 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926757.225:58948): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926757.225:58949): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926757.240:58950): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926757.240:58951): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.241:58952): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446159 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926757.265:58953): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926757.266:58954): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926757.277:58955): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926757.277:58956): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.278:58957): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446173 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926757.339:58958): pid=446189 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926757.339:58959): pid=446189 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6E707369756D6D69716C76696276707A68747667636C6E7864627661737375203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363735372E313132363738382D313637362D3237333439373537353231373735312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926757.341:58960): pid=446189 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926757.345:58961): pid=446189 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926757.577:58962): pid=446189 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926757.578:58963): pid=446189 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926757.581:58964): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926757.581:58965): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926757.594:58966): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926757.594:58967): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.596:58968): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446194 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926757.623:58969): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926757.623:58970): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926757.769:58971): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926757.769:58972): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.771:58973): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446208 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926757.799:58974): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926757.799:58975): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926757.810:58976): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926757.810:58977): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.812:58978): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446221 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926757.850:58979): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926757.850:58980): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.861:58981): pid=446085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=446086 suid=74 rport=58874 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926757.861:58982): pid=446085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446086 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926757.862:58983): pid=446085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=13.229.105.114 addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926757.863:58984): pid=446085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926757.863:58985): pid=446085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926757.874:58986): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926757.874:58987): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.875:58988): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446240 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926757.918:58989): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926757.918:58990): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926757.931:58991): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926757.931:58992): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.932:58993): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446253 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926757.960:58994): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926757.960:58995): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926757.975:58996): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926757.975:58997): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926757.976:58998): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446267 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926758.039:58999): pid=446283 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926758.040:59000): pid=446283 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637465666D626E6361766E63686E666B6C6B646B6878677762716B6269757578203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363735372E3830313636382D313730332D3138353630343238333630353136392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926758.040:59001): pid=446283 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926758.043:59002): pid=446283 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926758.277:59003): pid=446283 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926758.277:59004): pid=446283 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926758.280:59005): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926758.280:59006): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926758.382:59007): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926758.382:59008): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926758.383:59009): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446286 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926758.432:59010): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926758.433:59011): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926758.444:59012): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926758.444:59013): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926758.445:59014): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446299 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926758.475:59015): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926758.475:59016): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926758.487:59017): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926758.487:59018): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926758.488:59019): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446313 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926758.554:59020): pid=446329 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926758.554:59021): pid=446329 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79757472666C77636D79696C6C6C79747A6870756F76676870756A766669756A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363735372E3830313636382D313730332D3138353630343238333630353136392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926758.555:59022): pid=446329 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926758.557:59023): pid=446329 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926758.771:59024): pid=446329 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926758.772:59025): pid=446329 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926758.775:59026): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926758.775:59027): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926758.788:59028): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926758.788:59029): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926758.789:59030): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446332 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926758.814:59031): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926758.814:59032): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926758.824:59033): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926758.824:59034): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926758.826:59035): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446345 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926758.862:59036): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926758.862:59037): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926758.970:59038): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926758.970:59039): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926758.972:59040): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446364 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926759.006:59041): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926759.006:59042): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926759.025:59043): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926759.025:59044): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926759.026:59045): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446377 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926759.071:59046): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926759.071:59047): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926759.085:59048): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926759.085:59049): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926759.086:59050): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446390 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926759.113:59051): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926759.113:59052): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926759.126:59053): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926759.127:59054): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926759.127:59055): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446404 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926759.182:59056): pid=446420 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926759.182:59057): pid=446420 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65686977656D6775647668626B79717364666E78796A77716B73777472696C65203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363735382E383135393834372D313730332D3138373730303237393532323931342F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926759.183:59058): pid=446420 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926759.185:59059): pid=446420 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926759.411:59060): pid=446420 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926759.411:59061): pid=446420 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926759.415:59062): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926759.415:59063): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926759.444:59064): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926759.444:59065): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926759.445:59066): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446423 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926759.495:59067): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926759.495:59068): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926759.506:59069): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926759.506:59070): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926759.508:59071): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446436 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926759.539:59072): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926759.539:59073): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926759.550:59074): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926759.550:59075): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926759.552:59076): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446450 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926759.611:59077): pid=446466 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926759.611:59078): pid=446466 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677370726A667470747261626D7269716473696D6E726174756D6F6D6B617373203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363735382E383135393834372D313730332D3138373730303237393532323931342F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926759.611:59079): pid=446466 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926759.614:59080): pid=446466 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=BPF msg=audit(1764926760.222:59081): prog-id=2288 op=LOAD type=BPF msg=audit(1764926760.222:59082): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926760.222:59083): prog-id=2289 op=LOAD type=BPF msg=audit(1764926760.222:59084): prog-id=2290 op=LOAD type=BPF msg=audit(1764926760.222:59085): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926760.222:59086): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926760.225:59087): prog-id=2291 op=LOAD type=BPF msg=audit(1764926760.225:59088): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926760.226:59089): prog-id=2292 op=LOAD type=BPF msg=audit(1764926760.226:59090): prog-id=2293 op=LOAD type=BPF msg=audit(1764926760.226:59091): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926760.226:59092): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926760.235:59093): prog-id=2294 op=LOAD type=BPF msg=audit(1764926760.235:59094): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926760.235:59095): prog-id=2295 op=LOAD type=BPF msg=audit(1764926760.235:59096): prog-id=2296 op=LOAD type=BPF msg=audit(1764926760.235:59097): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926760.235:59098): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926760.237:59099): prog-id=2297 op=LOAD type=BPF msg=audit(1764926760.237:59100): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764926760.266:59101): pid=446466 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926760.266:59102): pid=446466 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926760.271:59103): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926760.271:59104): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926760.406:59105): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926760.406:59106): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926760.408:59107): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446505 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926760.470:59108): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926760.470:59109): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926760.482:59110): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926760.482:59111): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926760.483:59112): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446518 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926760.515:59113): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926760.515:59114): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926760.528:59115): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926760.529:59116): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926760.530:59117): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446532 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926760.591:59118): pid=446548 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926760.592:59119): pid=446548 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A6572626B77656767786B6979676C6D67746F756A776C6F6D766F79727965203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363735382E383135393834372D313730332D3138373730303237393532323931342F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926760.594:59120): pid=446548 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926760.599:59121): pid=446548 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=BPF msg=audit(1764926762.256:59122): prog-id=2298 op=LOAD type=BPF msg=audit(1764926762.256:59123): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926762.256:59124): prog-id=2299 op=LOAD type=BPF msg=audit(1764926762.256:59125): prog-id=2300 op=LOAD type=BPF msg=audit(1764926762.256:59126): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926762.256:59127): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926762.262:59128): prog-id=2301 op=LOAD type=BPF msg=audit(1764926762.262:59129): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926762.263:59130): prog-id=2302 op=LOAD type=BPF msg=audit(1764926762.263:59131): prog-id=2303 op=LOAD type=BPF msg=audit(1764926762.263:59132): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926762.263:59133): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926762.281:59134): prog-id=2304 op=LOAD type=BPF msg=audit(1764926762.281:59135): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926762.281:59136): prog-id=2305 op=LOAD type=BPF msg=audit(1764926762.281:59137): prog-id=2306 op=LOAD type=BPF msg=audit(1764926762.281:59138): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926762.281:59139): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926762.284:59140): prog-id=2307 op=LOAD type=BPF msg=audit(1764926762.284:59141): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926762.454:59142): prog-id=2308 op=LOAD type=SYSCALL msg=audit(1764926762.454:59142): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffde925b220 a2=90 a3=9500000001 items=0 ppid=446606 pid=446607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764926762.454:59142): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393437663164623066373033666462363439623334333638313461393334 type=SERVICE_START msg=audit(1764926762.529:59143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764926762.529:59144): pid=446612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1764926762.530:59145): pid=446612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1764926762.531:59146): pid=446612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926762.589:59147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764926762.623:59148): pid=446641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1764926762.623:59149): pid=446641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1764926762.624:59150): pid=446641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764926762.624:59151): pid=446641 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=241 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1764926762.624:59151): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd083a2f50 a2=1 a3=0 items=0 ppid=1 pid=446641 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764926762.624:59151): proctitle="(systemd)" type=USER_START msg=audit(1764926762.627:59152): pid=446641 uid=0 auid=0 ses=241 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1764926762.648:59153): prog-id=2309 op=LOAD type=SYSCALL msg=audit(1764926762.648:59153): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd612bdc10 a2=90 a3=0 items=0 ppid=1 pid=446641 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764926762.648:59153): proctitle="(systemd)" type=BPF msg=audit(1764926762.649:59154): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926762.649:59155): prog-id=2310 op=LOAD type=SYSCALL msg=audit(1764926762.649:59155): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd612bdcb0 a2=90 a3=4 items=0 ppid=1 pid=446641 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764926762.649:59155): proctitle="(systemd)" type=BPF msg=audit(1764926762.649:59156): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1764926762.746:59157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=BPF msg=audit(1764926763.079:59158): prog-id=2311 op=LOAD type=BPF msg=audit(1764926763.079:59159): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926763.079:59160): prog-id=2312 op=LOAD type=BPF msg=audit(1764926763.079:59161): prog-id=2313 op=LOAD type=BPF msg=audit(1764926763.079:59162): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926763.079:59163): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926763.082:59164): prog-id=2314 op=LOAD type=BPF msg=audit(1764926763.082:59165): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926763.083:59166): prog-id=2315 op=LOAD type=BPF msg=audit(1764926763.083:59167): prog-id=2316 op=LOAD type=BPF msg=audit(1764926763.083:59168): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926763.083:59169): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926763.091:59170): prog-id=2317 op=LOAD type=BPF msg=audit(1764926763.091:59171): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926763.091:59172): prog-id=2318 op=LOAD type=BPF msg=audit(1764926763.092:59173): prog-id=2319 op=LOAD type=BPF msg=audit(1764926763.092:59174): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926763.092:59175): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926763.093:59176): prog-id=2320 op=LOAD type=BPF msg=audit(1764926763.093:59177): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1764926763.105:59178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926763.106:59179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_ovn_controller comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764926763.136:59180): pid=446612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926763.150:59181): pid=446548 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926763.150:59182): pid=446548 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926763.156:59183): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926763.156:59184): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926763.176:59185): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926763.176:59186): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_END msg=audit(1764926763.176:59187): pid=446612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1764926763.176:59188): pid=446612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926763.178:59189): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446706 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926763.192:59190): pid=446710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1764926763.192:59191): pid=446710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_copy_cacerts" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1764926763.193:59192): pid=446710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764926763.217:59193): pid=446710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926763.221:59194): pid=446710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1764926763.221:59195): pid=446710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926763.227:59196): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926763.227:59197): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926763.308:59198): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926763.308:59199): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926763.310:59200): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446728 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926763.337:59201): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926763.337:59202): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926763.349:59203): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926763.349:59204): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926763.350:59205): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446741 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926763.386:59206): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926763.386:59207): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926763.406:59208): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926763.406:59209): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926763.407:59210): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446760 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926763.446:59211): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926763.446:59212): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926763.458:59213): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926763.458:59214): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926763.459:59215): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446773 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926763.489:59216): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926763.490:59217): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926763.503:59218): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926763.504:59219): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926763.505:59220): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446787 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926763.573:59221): pid=446803 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926763.574:59222): pid=446803 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77716E636B7877646965676C7278737270656A66676E626C766C676A7A676E77203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363736332E333430363935312D313738372D3133353632333537343538313436322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926763.574:59223): pid=446803 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926763.580:59224): pid=446803 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926763.803:59225): pid=446803 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926763.803:59226): pid=446803 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926763.807:59227): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926763.807:59228): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926764.412:59229): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926764.412:59230): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926764.414:59231): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446807 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926764.449:59232): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926764.449:59233): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926764.518:59234): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926764.518:59235): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926764.520:59236): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446821 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926764.553:59237): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926764.553:59238): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926764.563:59239): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926764.564:59240): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926764.565:59241): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446834 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926764.607:59242): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926764.607:59243): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926764.717:59244): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926764.717:59245): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926764.719:59246): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446853 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926764.770:59247): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926764.771:59248): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926764.786:59249): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926764.786:59250): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926764.788:59251): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446866 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926764.819:59252): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926764.820:59253): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926764.833:59254): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926764.833:59255): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926764.834:59256): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446880 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926764.910:59257): pid=446896 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926764.910:59258): pid=446896 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C6D6C6C7277746771647A6E7775626B73726C716D79787A77706E6F6F6D6C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363736342E353535333931332D313831312D32323834303935393634323930352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926764.911:59259): pid=446896 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926764.914:59260): pid=446896 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926765.155:59261): pid=446896 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926765.155:59262): pid=446896 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926765.160:59263): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926765.160:59264): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926765.173:59265): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926765.173:59266): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926765.175:59267): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446902 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926765.204:59268): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926765.204:59269): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926766.005:59270): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926766.005:59271): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926766.007:59272): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446916 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926766.036:59273): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926766.036:59274): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926766.053:59275): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926766.053:59276): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926766.054:59277): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446929 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926766.086:59278): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926766.086:59279): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926766.121:59280): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926766.121:59281): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926766.123:59282): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446948 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926766.210:59283): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926766.211:59284): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926766.223:59285): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926766.223:59286): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926766.225:59287): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446961 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926766.257:59288): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926766.257:59289): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926766.269:59290): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926766.269:59291): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926766.271:59292): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446975 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926766.341:59293): pid=446991 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926766.341:59294): pid=446991 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6678696864676A6E68646272786B6A64647A637A786474746A7578646F677869203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363736362E303338373830322D313835302D3233373334333834353339343335372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926766.342:59295): pid=446991 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926766.345:59296): pid=446991 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926766.582:59297): pid=446991 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926766.582:59298): pid=446991 uid=1000 auid=1000 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926766.586:59299): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926766.586:59300): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926766.598:59301): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926766.598:59302): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926766.600:59303): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=446995 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926766.632:59304): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926766.632:59305): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926767.210:59306): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=439410 suid=1000 rport=53560 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926767.210:59307): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439410 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926767.212:59308): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1764926767.212:59309): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926767.213:59310): pid=439407 uid=0 auid=1000 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=439407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764926771.334:59311): pid=447044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926771.441:59312): pid=447043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=447044 suid=74 rport=58368 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926771.442:59313): pid=447043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=447044 suid=74 rport=58368 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926772.089:59314): pid=447043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=447044 suid=74 rport=58368 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926772.089:59315): pid=447043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447044 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926772.090:59316): pid=447043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.185.99.40 addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926772.090:59317): pid=447043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926772.091:59318): pid=447043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926772.649:59319): pid=447046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926772.651:59320): pid=447045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=447046 suid=74 rport=39640 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926772.651:59321): pid=447045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=447046 suid=74 rport=39640 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1764926772.733:59322): pid=447045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926772.733:59323): pid=447045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5d:f5:28:43:c1:ce:d9:fe:fd:db:bd:89:9e:0e:5e:69:1c:b2:7e:10:3c:5c:36:4b:50:86:57:31:8b:3e:6d:e5 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926772.763:59324): pid=447049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_ACCT msg=audit(1764926772.767:59325): pid=447045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926772.768:59326): pid=447045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=447046 suid=74 rport=39640 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1764926772.770:59327): pid=447045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764926772.770:59328): pid=447045 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=242 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1764926772.770:59328): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffde70b9fb0 a2=4 a3=3e8 items=0 ppid=410121 pid=447045 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=242 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764926772.770:59328): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1764926772.771:59329): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1764926772.808:59330): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926772.809:59331): pid=447050 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1764926772.811:59332): pid=447050 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_SESSION msg=audit(1764926772.842:59333): pid=447047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=447049 suid=74 rport=39260 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926772.842:59334): pid=447047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=447049 suid=74 rport=39260 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764926772.854:59335): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926772.854:59336): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926772.857:59337): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447051 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926772.893:59338): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926772.893:59339): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926772.904:59340): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926772.904:59341): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926772.906:59342): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447064 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926772.941:59343): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926772.941:59344): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926773.190:59345): pid=447047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=447049 suid=74 rport=39260 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926773.191:59346): pid=447047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447049 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926773.192:59347): pid=447047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926773.192:59348): pid=447047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926773.192:59349): pid=447047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926773.263:59350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926773.271:59351): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926773.271:59352): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926773.276:59353): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447085 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=SERVICE_STOP msg=audit(1764926773.295:59354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926773.311:59355): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926773.311:59356): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926773.337:59357): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926773.337:59358): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926773.339:59359): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447099 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926773.397:59360): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926773.397:59361): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926773.409:59362): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926773.409:59363): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926773.411:59364): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447112 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926773.444:59365): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926773.444:59366): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926773.459:59367): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926773.459:59368): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926773.461:59369): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447126 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926774.092:59370): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926774.092:59371): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926774.409:59372): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926774.409:59373): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926774.411:59374): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447150 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926774.441:59375): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926774.441:59376): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926775.427:59377): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926775.427:59378): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926775.429:59379): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447165 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926775.460:59380): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926775.460:59381): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926775.472:59382): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926775.472:59383): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926775.474:59384): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447178 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926775.509:59385): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926775.509:59386): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926775.693:59387): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926775.694:59388): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926775.695:59389): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447197 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926775.756:59390): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926775.756:59391): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926776.206:59392): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926776.206:59393): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926776.207:59394): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447210 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926776.230:59395): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926776.230:59396): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926776.245:59397): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926776.245:59398): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926776.246:59399): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447224 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926776.338:59400): pid=447240 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926776.338:59401): pid=447240 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6178746E7579736B6E756C6A71686F686A616F717772756F637866736A6D7177203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363737352E343633323733352D36322D3236333838313635393631303135332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926776.339:59402): pid=447240 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926776.343:59403): pid=447240 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926776.578:59404): pid=447240 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926776.578:59405): pid=447240 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926776.582:59406): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926776.582:59407): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926776.595:59408): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926776.595:59409): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926776.596:59410): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447243 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926776.623:59411): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926776.623:59412): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926776.656:59413): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926776.656:59414): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926776.657:59415): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447257 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926776.688:59416): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926776.688:59417): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926776.700:59418): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926776.700:59419): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926776.701:59420): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447270 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926776.737:59421): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926776.737:59422): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926776.760:59423): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926776.760:59424): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926776.761:59425): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447289 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926776.814:59426): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926776.814:59427): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926776.828:59428): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926776.828:59429): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926776.829:59430): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447302 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926776.858:59431): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926776.858:59432): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926776.872:59433): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926776.873:59434): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926776.874:59435): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447316 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926776.929:59436): pid=447332 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926776.930:59437): pid=447332 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6C78766B6E77726F686D6775696166707663796E766168796A6C7570646172203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363737362E363931353730382D36322D39303235383831383538393038332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926776.931:59438): pid=447332 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926776.933:59439): pid=447332 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926777.151:59440): pid=447332 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926777.151:59441): pid=447332 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926777.155:59442): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926777.155:59443): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926777.167:59444): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926777.167:59445): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926777.169:59446): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447335 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926777.194:59447): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926777.194:59448): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926777.224:59449): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926777.224:59450): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926777.226:59451): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447349 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926777.249:59452): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926777.249:59453): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926777.261:59454): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926777.262:59455): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926777.263:59456): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447362 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926777.294:59457): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926777.294:59458): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926777.316:59459): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926777.316:59460): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926777.318:59461): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447381 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926777.357:59462): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926777.357:59463): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926777.372:59464): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926777.372:59465): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926777.373:59466): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447394 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926777.400:59467): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926777.400:59468): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926777.414:59469): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926777.414:59470): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926777.415:59471): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447408 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926777.479:59472): pid=447424 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926777.479:59473): pid=447424 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796F6B6F6A6A6C706A7A77716662666A76787076706A626E716A7A67626D7173203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363737372E323532303230382D36322D3134303630333937303737363032322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926777.480:59474): pid=447424 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926777.482:59475): pid=447424 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926777.721:59476): pid=447424 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926777.721:59477): pid=447424 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926777.726:59478): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926777.726:59479): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926777.743:59480): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926777.743:59481): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926777.744:59482): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447427 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926777.778:59483): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926777.778:59484): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926777.813:59485): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926777.813:59486): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926777.815:59487): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447441 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926777.844:59488): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926777.845:59489): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926777.858:59490): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926777.858:59491): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926777.860:59492): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447454 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926777.896:59493): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926777.897:59494): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926777.914:59495): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926777.914:59496): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926777.916:59497): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447473 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926777.970:59498): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926777.970:59499): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926777.982:59500): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926777.982:59501): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926777.984:59502): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447486 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926778.015:59503): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926778.016:59504): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926778.031:59505): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926778.031:59506): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926778.033:59507): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447500 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926778.091:59508): pid=447516 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926778.091:59509): pid=447516 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6561677562667377656A6779696C716675796C666B7676666D6570756F626565203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363737372E3834393035352D36322D3134363534333637383430333834302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926778.092:59510): pid=447516 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926778.095:59511): pid=447516 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926778.327:59512): pid=447516 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926778.327:59513): pid=447516 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926778.331:59514): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926778.331:59515): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926778.344:59516): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926778.344:59517): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926778.346:59518): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447519 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926778.371:59519): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926778.371:59520): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926778.400:59521): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926778.400:59522): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926778.402:59523): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447533 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926778.429:59524): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926778.429:59525): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926778.440:59526): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926778.441:59527): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926778.442:59528): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447546 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926778.471:59529): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926778.471:59530): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926778.490:59531): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926778.490:59532): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926778.492:59533): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447565 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926778.541:59534): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926778.541:59535): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926778.562:59536): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926778.563:59537): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926778.564:59538): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447578 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926778.592:59539): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926778.592:59540): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926778.605:59541): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926778.606:59542): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926778.607:59543): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447592 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926778.672:59544): pid=447608 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926778.673:59545): pid=447608 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6A6C6C6A726E6C7171717873767A6467696F6666696E786E726E6779726C75203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363737382E343330393936322D36322D31363239353339303934353535392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926778.673:59546): pid=447608 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926778.676:59547): pid=447608 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926778.897:59548): pid=447608 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926778.898:59549): pid=447608 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926778.901:59550): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926778.902:59551): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926778.913:59552): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926778.913:59553): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926778.914:59554): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447611 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926778.943:59555): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926778.943:59556): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926778.991:59557): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926778.991:59558): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926778.993:59559): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447625 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926779.021:59560): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926779.021:59561): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926779.035:59562): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926779.035:59563): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926779.037:59564): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447638 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926779.066:59565): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926779.066:59566): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926779.097:59567): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926779.097:59568): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926779.098:59569): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447657 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926779.155:59570): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926779.156:59571): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926779.170:59572): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926779.170:59573): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926779.172:59574): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447670 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926779.198:59575): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926779.198:59576): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926779.209:59577): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926779.210:59578): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926779.211:59579): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447684 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926779.554:59580): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926779.554:59581): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926779.572:59582): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926779.572:59583): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926779.573:59584): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447701 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926779.596:59585): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926779.596:59586): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926779.690:59587): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926779.691:59588): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926779.692:59589): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447715 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926779.720:59590): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926779.720:59591): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926779.733:59592): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926779.733:59593): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926779.735:59594): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447728 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926779.765:59595): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926779.766:59596): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926779.956:59597): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926779.957:59598): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926779.958:59599): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447747 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926780.001:59600): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926780.001:59601): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926780.013:59602): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926780.014:59603): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926780.015:59604): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447760 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926780.040:59605): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926780.041:59606): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926780.053:59607): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926780.054:59608): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926780.055:59609): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447774 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926780.117:59610): pid=447790 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926780.118:59611): pid=447790 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6866706E74796A6569786565636A77696878796372636A7771666A796D796C64203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363737392E373232383136372D3139342D3134383738383035343832373635372F416E736962616C6C5A5F7365626F6F6C65616E2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926780.118:59612): pid=447790 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926780.121:59613): pid=447790 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926780.466:59614): pid=447790 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926780.466:59615): pid=447790 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926780.470:59616): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926780.470:59617): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926780.484:59618): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926780.484:59619): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926780.485:59620): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447793 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926780.513:59621): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926780.513:59622): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926780.614:59623): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926780.615:59624): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926780.616:59625): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447807 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926780.644:59626): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926780.645:59627): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926780.655:59628): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926780.655:59629): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926780.656:59630): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447820 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926780.687:59631): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926780.688:59632): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926780.864:59633): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926780.864:59634): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926780.866:59635): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447839 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926780.904:59636): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926780.904:59637): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926780.915:59638): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926780.915:59639): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926780.916:59640): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447852 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926780.936:59641): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926780.936:59642): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926780.946:59643): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926780.946:59644): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926780.947:59645): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447866 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926781.198:59646): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926781.198:59647): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926781.219:59648): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926781.219:59649): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926781.221:59650): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447883 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926781.256:59651): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926781.257:59652): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926781.270:59653): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926781.270:59654): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926781.271:59655): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447896 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926781.302:59656): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926781.302:59657): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926781.451:59658): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926781.451:59659): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926781.453:59660): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447911 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926781.505:59661): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926781.505:59662): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926781.519:59663): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926781.520:59664): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926781.521:59665): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447924 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_LOGIN msg=audit(1764926781.546:59666): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926781.546:59667): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764926781.554:59668): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926781.554:59669): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926781.568:59670): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926781.568:59671): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926781.570:59672): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447950 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926781.597:59673): pid=447937 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926781.597:59674): pid=447937 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926781.598:59675): pid=447937 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926781.601:59676): pid=447937 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926781.603:59677): pid=447937 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926781.603:59678): pid=447937 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926781.611:59679): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926781.611:59680): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764926781.624:59681): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926781.624:59682): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926781.685:59683): pid=447970 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926781.685:59684): pid=447970 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926781.686:59685): pid=447970 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926781.688:59686): pid=447970 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926781.840:59687): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926781.840:59688): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926781.852:59689): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926781.852:59690): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926781.853:59691): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447985 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926781.875:59692): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926781.875:59693): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926781.919:59694): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926781.919:59695): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926781.920:59696): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447999 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926781.942:59697): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926781.942:59698): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926781.955:59699): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926781.955:59700): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926781.957:59701): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448014 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926781.988:59702): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926781.988:59703): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926782.025:59704): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926782.026:59705): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926782.028:59706): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448046 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926782.076:59707): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926782.076:59708): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926782.093:59709): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926782.094:59710): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926782.095:59711): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448059 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926782.122:59712): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926782.122:59713): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926782.134:59714): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926782.135:59715): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926782.136:59716): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448076 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926782.284:59717): pid=447970 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926782.284:59718): pid=447970 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926782.374:59719): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926782.374:59720): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764926782.425:59721): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926782.425:59722): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926782.440:59723): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926782.441:59724): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926782.442:59725): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448107 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926782.465:59726): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926782.466:59727): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926782.478:59728): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926782.478:59729): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926782.479:59730): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448120 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926782.500:59731): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926782.500:59732): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926782.523:59733): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926782.524:59734): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926782.525:59735): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448134 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926782.565:59736): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926782.565:59737): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926782.582:59738): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926782.582:59739): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926782.584:59740): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448147 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926782.615:59741): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926782.615:59742): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926782.630:59743): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926782.630:59744): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926782.632:59745): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448161 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_LOGIN msg=audit(1764926782.644:59746): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926782.644:59747): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926782.696:59748): pid=448169 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926782.696:59749): pid=448169 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926782.697:59750): pid=448169 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926782.699:59751): pid=448169 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926782.702:59752): pid=448169 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926782.702:59753): pid=448169 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926782.707:59754): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926782.707:59755): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764926782.910:59756): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926782.910:59757): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926782.923:59758): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926782.923:59759): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926782.924:59760): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448193 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926782.944:59761): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926782.944:59762): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926783.154:59763): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926783.154:59764): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926783.155:59765): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448207 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926783.183:59766): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926783.183:59767): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926783.195:59768): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926783.195:59769): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926783.197:59770): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448220 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926783.227:59771): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926783.227:59772): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926783.252:59773): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926783.252:59774): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926783.254:59775): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448239 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926783.307:59776): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926783.307:59777): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926783.322:59778): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926783.322:59779): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926783.323:59780): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448252 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926783.353:59781): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926783.353:59782): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926783.366:59783): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926783.366:59784): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926783.367:59785): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448266 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926783.430:59786): pid=448282 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926783.431:59787): pid=448282 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6368616976617866636C77647A6F6D6F656179777273686D796A637069656367203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363738332E313836303936322D3331342D3231343733333939313736343133372F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926783.431:59788): pid=448282 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926783.436:59789): pid=448282 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=SERVICE_START msg=audit(1764926783.450:59790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926783.455:59791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926783.460:59792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926783.468:59793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926783.475:59794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926783.563:59795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926783.745:59796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926783.765:59797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926783.775:59798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926783.847:59799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926783.870:59800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926783.900:59801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926784.004:59802): pid=448282 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926784.004:59803): pid=448282 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926784.009:59804): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926784.009:59805): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926784.619:59806): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926784.619:59807): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926784.620:59808): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448466 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926784.684:59809): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926784.685:59810): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926784.699:59811): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926784.699:59812): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926784.701:59813): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448479 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926784.733:59814): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926784.734:59815): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926784.747:59816): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926784.747:59817): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926784.749:59818): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448493 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926784.802:59819): pid=448509 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926784.803:59820): pid=448509 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78736E70657678616C6475736670657666666A6876697564706271717777696A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363738332E313836303936322D3331342D3231343733333939313736343133372F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926784.803:59821): pid=448509 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926784.809:59822): pid=448509 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926787.539:59823): pid=448515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926787.576:59824): pid=448514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=448515 suid=74 rport=59411 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926787.577:59825): pid=448514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=448515 suid=74 rport=59411 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926787.872:59826): pid=448514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=448515 suid=74 rport=59411 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926787.872:59827): pid=448514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448515 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926787.873:59828): pid=448514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=12.189.234.28 addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926787.874:59829): pid=448514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926787.874:59830): pid=448514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1764926788.093:59831): pid=448509 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926788.094:59832): pid=448509 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926788.098:59833): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926788.098:59834): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926788.109:59835): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926788.109:59836): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926788.111:59837): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448516 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926788.139:59838): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926788.139:59839): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926788.376:59840): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926788.376:59841): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926788.377:59842): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448530 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926788.412:59843): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926788.412:59844): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926788.428:59845): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926788.428:59846): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926788.429:59847): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448543 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926788.468:59848): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926788.469:59849): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926788.816:59850): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926788.817:59851): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926788.819:59852): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448562 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926788.876:59853): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926788.876:59854): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926788.892:59855): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926788.892:59856): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926788.893:59857): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448575 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926788.929:59858): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926788.929:59859): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926788.942:59860): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926788.942:59861): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926788.944:59862): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448589 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926789.014:59863): pid=448605 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926789.014:59864): pid=448605 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627771776D65766562786A78736C61676F646D6B62776D7A64757063616C6877203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363738382E343136313339342D3335302D35303032333936363830353132382F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926789.015:59865): pid=448605 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926789.020:59866): pid=448605 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926789.432:59867): pid=448605 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926789.432:59868): pid=448605 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926789.437:59869): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926789.437:59870): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926789.454:59871): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926789.454:59872): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926789.455:59873): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448611 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926789.486:59874): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926789.486:59875): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926789.562:59876): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926789.562:59877): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926789.564:59878): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448625 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926789.593:59879): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926789.594:59880): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926789.603:59881): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926789.603:59882): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926789.605:59883): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448638 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926789.642:59884): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926789.643:59885): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926789.672:59886): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926789.672:59887): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926789.674:59888): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448657 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926789.719:59889): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926789.719:59890): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926789.731:59891): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926789.731:59892): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926789.733:59893): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448670 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926789.766:59894): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926789.766:59895): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926789.778:59896): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926789.778:59897): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926789.779:59898): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448684 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926790.028:59899): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926790.028:59900): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926790.056:59901): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926790.056:59902): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926790.058:59903): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448701 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926790.096:59904): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926790.096:59905): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926790.111:59906): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926790.111:59907): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926790.113:59908): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448714 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926790.142:59909): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926790.142:59910): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926790.161:59911): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926790.161:59912): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926790.162:59913): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448728 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926790.205:59914): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926790.205:59915): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926790.222:59916): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926790.222:59917): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926790.223:59918): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448741 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926790.248:59919): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926790.248:59920): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926790.261:59921): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926790.261:59922): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926790.262:59923): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448755 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926790.521:59924): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926790.521:59925): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926790.537:59926): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926790.537:59927): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926790.539:59928): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448772 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926790.572:59929): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926790.572:59930): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926790.602:59931): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926790.603:59932): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926790.605:59933): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448786 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926790.636:59934): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926790.636:59935): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926790.648:59936): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926790.648:59937): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926790.650:59938): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448799 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926790.677:59939): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926790.678:59940): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926790.708:59941): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926790.708:59942): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926790.709:59943): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448818 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926790.752:59944): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926790.752:59945): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926790.763:59946): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926790.763:59947): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926790.765:59948): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448831 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926790.797:59949): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926790.797:59950): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926790.808:59951): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926790.808:59952): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926790.809:59953): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448845 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926791.060:59954): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926791.061:59955): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926791.079:59956): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926791.079:59957): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926791.080:59958): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448862 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926791.115:59959): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926791.115:59960): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926791.129:59961): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926791.129:59962): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926791.131:59963): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448875 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926791.159:59964): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926791.159:59965): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926791.179:59966): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926791.179:59967): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926791.181:59968): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448889 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926791.231:59969): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926791.231:59970): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926791.242:59971): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926791.242:59972): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926791.244:59973): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448902 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926791.279:59974): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926791.280:59975): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926791.299:59976): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926791.299:59977): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926791.300:59978): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448916 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926791.566:59979): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926791.566:59980): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926791.579:59981): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926791.579:59982): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926791.580:59983): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448933 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926791.611:59984): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926791.611:59985): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926792.219:59986): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926792.219:59987): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926792.219:59988): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448947 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926792.243:59989): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926792.243:59990): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926792.258:59991): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926792.258:59992): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926792.258:59993): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448960 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926792.288:59994): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926792.288:59995): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926792.313:59996): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926792.313:59997): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926792.318:59998): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448979 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926792.363:59999): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926792.363:60000): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926792.378:60001): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926792.378:60002): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926792.378:60003): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=448992 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926792.408:60004): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926792.408:60005): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926792.423:60006): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926792.423:60007): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926792.423:60008): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449006 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=SERVICE_START msg=audit(1764926793.014:60009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926793.183:60010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926793.190:60011): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926793.190:60012): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926793.207:60013): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926793.207:60014): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926793.209:60015): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449048 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926793.245:60016): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926793.246:60017): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926793.259:60018): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926793.259:60019): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926793.261:60020): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449061 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926793.291:60021): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926793.291:60022): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926793.314:60023): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926793.314:60024): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926793.316:60025): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449075 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926793.365:60026): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926793.365:60027): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926793.377:60028): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926793.378:60029): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926793.379:60030): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449088 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926793.410:60031): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926793.410:60032): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926793.425:60033): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926793.426:60034): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926793.427:60035): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449102 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926793.692:60036): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926793.693:60037): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926793.719:60038): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926793.719:60039): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926793.720:60040): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449120 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926793.750:60041): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926793.751:60042): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926793.772:60043): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926793.772:60044): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926793.774:60045): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449134 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926793.804:60046): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926793.804:60047): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926793.819:60048): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926793.819:60049): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926793.820:60050): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449147 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926793.852:60051): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926793.852:60052): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926793.874:60053): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926793.874:60054): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926793.876:60055): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449166 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926793.923:60056): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926793.924:60057): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926793.935:60058): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926793.935:60059): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926793.936:60060): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449179 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926793.967:60061): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926793.967:60062): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926793.981:60063): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926793.981:60064): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926793.982:60065): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449193 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926794.236:60066): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926794.236:60067): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926794.253:60068): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926794.253:60069): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926794.255:60070): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449210 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926794.291:60071): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926794.291:60072): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926794.303:60073): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926794.303:60074): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926794.305:60075): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449223 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926794.335:60076): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926794.335:60077): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926794.355:60078): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926794.355:60079): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926794.356:60080): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449237 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926794.408:60081): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926794.408:60082): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926794.421:60083): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926794.421:60084): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926794.422:60085): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449250 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926794.450:60086): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926794.450:60087): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926794.463:60088): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926794.463:60089): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926794.465:60090): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449264 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926794.731:60091): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926794.732:60092): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926794.747:60093): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926794.747:60094): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926794.748:60095): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449281 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926794.778:60096): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926794.779:60097): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926794.824:60098): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926794.824:60099): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926794.826:60100): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449295 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926794.855:60101): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926794.855:60102): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926794.869:60103): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926794.869:60104): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926794.870:60105): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449308 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926794.910:60106): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926794.910:60107): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926795.610:60108): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926795.611:60109): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926795.612:60110): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449327 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926795.665:60111): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926795.665:60112): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926795.677:60113): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926795.678:60114): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926795.679:60115): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449340 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926795.710:60116): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926795.710:60117): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926795.721:60118): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926795.721:60119): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926795.723:60120): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449354 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926796.003:60121): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926796.003:60122): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926796.017:60123): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926796.017:60124): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926796.019:60125): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449373 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926796.041:60126): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926796.041:60127): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926796.249:60128): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926796.250:60129): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926796.251:60130): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449387 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926796.278:60131): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926796.279:60132): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926796.291:60133): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926796.292:60134): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926796.293:60135): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449400 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926796.328:60136): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926796.328:60137): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926796.349:60138): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926796.349:60139): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926796.350:60140): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449419 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926796.396:60141): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926796.396:60142): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926796.410:60143): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926796.410:60144): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926796.441:60145): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449432 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926796.463:60146): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926796.463:60147): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926796.480:60148): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926796.480:60149): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926796.482:60150): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449446 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926796.535:60151): pid=449462 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926796.535:60152): pid=449462 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796963666D7A62656F6B706A6876797470766366716771696E7263796E776C65203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363739362E323830383239342D3632302D3230333931303336333033333831312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926796.536:60153): pid=449462 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926796.540:60154): pid=449462 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926796.773:60155): pid=449462 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926796.773:60156): pid=449462 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926796.778:60157): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926796.778:60158): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926796.790:60159): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926796.791:60160): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926796.792:60161): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449465 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926796.819:60162): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926796.819:60163): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926797.304:60164): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926797.304:60165): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926797.305:60166): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449479 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926797.336:60167): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926797.336:60168): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926797.348:60169): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926797.348:60170): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926797.349:60171): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449492 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926797.383:60172): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926797.383:60173): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926797.413:60174): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926797.413:60175): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926797.415:60176): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449511 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926797.449:60177): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926797.450:60178): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926797.465:60179): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926797.465:60180): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926797.467:60181): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449524 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926797.489:60182): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926797.489:60183): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926797.503:60184): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926797.503:60185): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926797.504:60186): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449538 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926797.561:60187): pid=449554 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926797.562:60188): pid=449554 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61647963726E6A6D646B62667669676F6F72716D6B6A66796F756E6E6B646371203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363739372E333337383930312D3634342D3234323333323832393033393837352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926797.563:60189): pid=449554 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926797.566:60190): pid=449554 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926797.786:60191): pid=449554 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926797.786:60192): pid=449554 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926797.789:60193): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926797.789:60194): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926797.808:60195): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926797.808:60196): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926797.810:60197): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449559 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926797.850:60198): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926797.851:60199): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926797.865:60200): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926797.865:60201): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926797.867:60202): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449572 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926797.894:60203): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926797.894:60204): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926797.910:60205): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926797.910:60206): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926797.911:60207): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449586 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926797.960:60208): pid=449602 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926797.960:60209): pid=449602 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6571766F6573706179756A77707A65626671616268697967656E6E6B6167746D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363739372E333337383930312D3634342D3234323333323832393033393837352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926797.961:60210): pid=449602 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926797.963:60211): pid=449602 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926798.195:60212): pid=449602 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926798.196:60213): pid=449602 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926798.199:60214): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926798.199:60215): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926798.210:60216): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926798.210:60217): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926798.211:60218): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449605 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926798.239:60219): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926798.239:60220): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926798.264:60221): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926798.264:60222): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926798.265:60223): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449619 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926798.286:60224): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926798.286:60225): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926798.297:60226): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926798.297:60227): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926798.298:60228): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449632 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926798.325:60229): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926798.325:60230): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926798.346:60231): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926798.346:60232): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926798.348:60233): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449651 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926798.384:60234): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926798.384:60235): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926798.402:60236): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926798.402:60237): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926798.404:60238): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449664 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926798.432:60239): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926798.432:60240): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926798.443:60241): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926798.443:60242): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926798.445:60243): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449678 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926798.506:60244): pid=449694 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926798.507:60245): pid=449694 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706C777669666B6B62626B7475706D6C6C737266617A78717971707773647479203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363739382E323838353638332D3634342D33363939303731343436343136392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926798.507:60246): pid=449694 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926798.510:60247): pid=449694 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926798.731:60248): pid=449694 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926798.732:60249): pid=449694 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926798.735:60250): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926798.735:60251): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926798.759:60252): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926798.759:60253): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926798.760:60254): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449699 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926798.800:60255): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926798.800:60256): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926798.816:60257): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926798.816:60258): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926798.817:60259): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449712 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926798.843:60260): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926798.843:60261): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926798.860:60262): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926798.860:60263): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926798.862:60264): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449726 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926798.924:60265): pid=449742 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926798.924:60266): pid=449742 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7478747075626272636366707075726E68626D716F767A756F6766696769796E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363739382E323838353638332D3634342D33363939303731343436343136392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926798.925:60267): pid=449742 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926798.928:60268): pid=449742 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926799.146:60269): pid=449742 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926799.147:60270): pid=449742 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926799.150:60271): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926799.150:60272): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926799.161:60273): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926799.162:60274): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926799.163:60275): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449745 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926799.186:60276): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926799.186:60277): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926799.362:60278): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926799.362:60279): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926799.363:60280): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449759 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926799.393:60281): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926799.393:60282): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926799.403:60283): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926799.403:60284): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926799.405:60285): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449772 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926799.437:60286): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926799.437:60287): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926799.458:60288): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926799.458:60289): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926799.459:60290): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449791 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926799.502:60291): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926799.502:60292): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926799.514:60293): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926799.515:60294): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926799.516:60295): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449804 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926799.546:60296): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926799.546:60297): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926799.565:60298): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926799.565:60299): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926799.567:60300): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449818 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926799.629:60301): pid=449834 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926799.629:60302): pid=449834 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A67767A74777462777262666F61707A7074636C796871707073796F6375716A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363739392E3339343838372D3731332D38363737303136373934323036322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926799.630:60303): pid=449834 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926799.634:60304): pid=449834 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926799.853:60305): pid=449834 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926799.854:60306): pid=449834 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926799.857:60307): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926799.857:60308): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926799.870:60309): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926799.870:60310): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926799.871:60311): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449837 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926799.890:60312): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926799.890:60313): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926799.987:60314): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926799.987:60315): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926799.988:60316): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449851 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926800.015:60317): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926800.015:60318): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926800.029:60319): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926800.029:60320): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926800.030:60321): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449864 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926800.067:60322): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926800.067:60323): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926800.091:60324): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926800.091:60325): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926800.092:60326): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449883 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926800.135:60327): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926800.135:60328): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926800.148:60329): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926800.148:60330): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926800.149:60331): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449896 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926800.177:60332): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926800.177:60333): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926800.190:60334): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926800.190:60335): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926800.191:60336): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449910 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926800.253:60337): pid=449926 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926800.253:60338): pid=449926 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66746B656F7063726D68706D68716874797274786C667767616D737876627579203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830302E303137393933352D3733372D3139343934373232363633383931332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926800.253:60339): pid=449926 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926800.255:60340): pid=449926 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926800.477:60341): pid=449926 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926800.478:60342): pid=449926 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926800.481:60343): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926800.481:60344): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926800.501:60345): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926800.501:60346): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926800.502:60347): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449931 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926800.540:60348): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926800.540:60349): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926800.556:60350): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926800.556:60351): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926800.557:60352): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449944 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926800.594:60353): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926800.594:60354): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926800.604:60355): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926800.604:60356): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926800.605:60357): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449958 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926800.654:60358): pid=449974 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926800.654:60359): pid=449974 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78767374767467637172756472737263777568666C68616B6D6D667065766779203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830302E303137393933352D3733372D3139343934373232363633383931332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926800.654:60360): pid=449974 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926800.656:60361): pid=449974 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926800.888:60362): pid=449974 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926800.889:60363): pid=449974 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926800.893:60364): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926800.893:60365): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926800.905:60366): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926800.905:60367): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926800.906:60368): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449977 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926800.937:60369): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926800.937:60370): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926801.051:60371): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926801.051:60372): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926801.053:60373): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449991 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926801.083:60374): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926801.083:60375): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926801.093:60376): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926801.093:60377): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926801.095:60378): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450004 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926801.130:60379): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926801.131:60380): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926801.154:60381): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926801.154:60382): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926801.159:60383): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450023 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926801.196:60384): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926801.197:60385): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926801.211:60386): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926801.211:60387): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926801.212:60388): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450036 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926801.242:60389): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926801.243:60390): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926801.255:60391): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926801.255:60392): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926801.257:60393): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450050 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926801.326:60394): pid=450066 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926801.326:60395): pid=450066 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61737A696A6E79717978777A767A7162736A73766E686E7671687A6D64756763203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830312E303835383439332D3737332D34313537333531343134363535312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926801.327:60396): pid=450066 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926801.329:60397): pid=450066 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926801.566:60398): pid=450066 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926801.566:60399): pid=450066 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926801.570:60400): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926801.570:60401): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926801.593:60402): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926801.593:60403): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926801.595:60404): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450071 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926801.642:60405): pid=450085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_END msg=audit(1764926801.644:60406): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926801.644:60407): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926801.659:60408): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926801.659:60409): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926801.660:60410): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450086 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926801.685:60411): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926801.685:60412): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926801.697:60413): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926801.697:60414): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926801.698:60415): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450100 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926801.746:60416): pid=450116 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926801.747:60417): pid=450116 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6676627A667766756F736D6E6A76706C6261617A776B6770746D746673746E78203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830312E303835383439332D3737332D34313537333531343134363535312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926801.747:60418): pid=450116 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926801.750:60419): pid=450116 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRYPTO_SESSION msg=audit(1764926801.877:60420): pid=450084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=450085 suid=74 rport=44298 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926801.877:60421): pid=450084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=450085 suid=74 rport=44298 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1764926801.930:60422): pid=450116 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926801.930:60423): pid=450116 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926801.933:60424): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926801.933:60425): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926801.945:60426): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926801.945:60427): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926801.947:60428): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450119 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926801.974:60429): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926801.974:60430): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926802.200:60431): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926802.200:60432): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926802.202:60433): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450133 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926802.230:60434): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926802.230:60435): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926802.241:60436): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926802.241:60437): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926802.242:60438): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450146 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926802.278:60439): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926802.278:60440): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926802.299:60441): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926802.300:60442): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926802.300:60443): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450165 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926802.389:60444): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926802.389:60445): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926802.410:60446): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926802.410:60447): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926802.411:60448): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450178 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926802.435:60449): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926802.435:60450): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926802.446:60451): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926802.446:60452): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926802.447:60453): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450192 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926802.494:60454): pid=450208 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926802.494:60455): pid=450208 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A646362776B747767776D6C766C6B6965616576776C666F7561786577626D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830322E3233333134382D3830392D3235363233383639383738383536382F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926802.495:60456): pid=450208 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926802.497:60457): pid=450208 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=BPF msg=audit(1764926803.104:60458): prog-id=2321 op=LOAD type=BPF msg=audit(1764926803.104:60459): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926803.104:60460): prog-id=2322 op=LOAD type=BPF msg=audit(1764926803.104:60461): prog-id=2323 op=LOAD type=BPF msg=audit(1764926803.104:60462): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926803.104:60463): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926803.107:60464): prog-id=2324 op=LOAD type=BPF msg=audit(1764926803.107:60465): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926803.107:60466): prog-id=2325 op=LOAD type=BPF msg=audit(1764926803.107:60467): prog-id=2326 op=LOAD type=BPF msg=audit(1764926803.107:60468): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926803.107:60469): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926803.116:60470): prog-id=2327 op=LOAD type=BPF msg=audit(1764926803.116:60471): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926803.116:60472): prog-id=2328 op=LOAD type=BPF msg=audit(1764926803.116:60473): prog-id=2329 op=LOAD type=BPF msg=audit(1764926803.116:60474): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926803.116:60475): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926803.117:60476): prog-id=2330 op=LOAD type=BPF msg=audit(1764926803.117:60477): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1764926803.175:60478): pid=450084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=450085 suid=74 rport=44298 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926803.175:60479): pid=450084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450085 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926803.176:60480): pid=450084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.106.194.74 addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926803.177:60481): pid=450084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926803.177:60482): pid=450084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1764926803.194:60483): pid=450208 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926803.195:60484): pid=450208 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926803.199:60485): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926803.199:60486): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926803.211:60487): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926803.211:60488): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926803.213:60489): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450249 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926803.242:60490): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926803.242:60491): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926803.344:60492): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926803.344:60493): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926803.345:60494): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450263 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926803.376:60495): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926803.377:60496): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926803.389:60497): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926803.389:60498): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926803.390:60499): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450276 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926803.420:60500): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926803.421:60501): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926803.444:60502): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926803.444:60503): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926803.445:60504): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450295 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926803.489:60505): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926803.489:60506): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926803.504:60507): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926803.504:60508): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926803.505:60509): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450308 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926803.534:60510): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926803.535:60511): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926803.548:60512): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926803.548:60513): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926803.550:60514): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450322 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926803.614:60515): pid=450338 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926803.615:60516): pid=450338 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726761766C6266696166787364747879726F737A657A75686A736C6863666565203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830332E333739313436362D3833332D3230303036363634353830383730392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926803.616:60517): pid=450338 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926803.621:60518): pid=450338 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926803.849:60519): pid=450338 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926803.849:60520): pid=450338 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926803.852:60521): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926803.852:60522): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926803.873:60523): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926803.873:60524): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926803.874:60525): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450343 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926803.910:60526): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926803.910:60527): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926803.924:60528): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926803.924:60529): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926803.925:60530): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450356 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926803.935:60531): pid=449119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=449119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_END msg=audit(1764926803.953:60532): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926803.953:60533): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926803.965:60534): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926803.965:60535): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926803.967:60536): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450370 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926804.034:60537): pid=450386 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926804.034:60538): pid=450386 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70626278776E7A69736661707A626E656E67706B6E69637A646B78646B746271203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830332E333739313436362D3833332D3230303036363634353830383730392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926804.034:60539): pid=450386 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926804.036:60540): pid=450386 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926804.263:60541): pid=450386 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926804.263:60542): pid=450386 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926804.267:60543): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926804.267:60544): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926804.279:60545): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926804.279:60546): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926804.280:60547): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450389 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926804.308:60548): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926804.308:60549): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926804.479:60550): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926804.479:60551): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926804.480:60552): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450403 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926804.508:60553): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926804.508:60554): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926804.523:60555): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926804.524:60556): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926804.525:60557): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450416 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926804.560:60558): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926804.560:60559): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926804.583:60560): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926804.583:60561): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926804.584:60562): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450435 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926804.628:60563): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926804.628:60564): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926804.643:60565): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926804.643:60566): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926804.644:60567): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450448 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926804.674:60568): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926804.674:60569): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926804.687:60570): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926804.687:60571): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926804.688:60572): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450462 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926804.754:60573): pid=450478 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926804.754:60574): pid=450478 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696E677470666368627A77737374746E68666F68796F61616C6B656B70666365203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830342E353131373933392D3836392D3234333838393730393437383536312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926804.754:60575): pid=450478 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926804.756:60576): pid=450478 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926804.986:60577): pid=450478 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926804.987:60578): pid=450478 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926804.990:60579): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926804.990:60580): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926805.018:60581): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926805.018:60582): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926805.020:60583): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450483 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926805.073:60584): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926805.073:60585): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926805.090:60586): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926805.090:60587): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926805.092:60588): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450496 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926805.121:60589): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926805.121:60590): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926805.148:60591): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926805.148:60592): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926805.150:60593): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450510 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926805.208:60594): pid=450526 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926805.208:60595): pid=450526 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61776C66717875767A646D67666F6D696D7068646E77676E7876707667747263203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830342E353131373933392D3836392D3234333838393730393437383536312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926805.209:60596): pid=450526 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926805.211:60597): pid=450526 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926805.443:60598): pid=450526 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926805.443:60599): pid=450526 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926805.447:60600): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926805.447:60601): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926805.458:60602): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926805.458:60603): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926805.459:60604): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450529 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926805.480:60605): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926805.481:60606): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926805.642:60607): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926805.642:60608): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926805.644:60609): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450543 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926805.673:60610): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926805.673:60611): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926805.686:60612): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926805.686:60613): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926805.687:60614): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450556 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926805.718:60615): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926805.718:60616): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926805.746:60617): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926805.746:60618): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926805.747:60619): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450575 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926805.813:60620): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926805.813:60621): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926806.305:60622): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926806.305:60623): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926806.307:60624): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450588 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926806.337:60625): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926806.337:60626): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926806.348:60627): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926806.348:60628): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926806.350:60629): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450602 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926806.414:60630): pid=450618 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926806.414:60631): pid=450618 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6178756175787970716C6E6D77676B6C657868736F6B6E69757A797A736B7A78203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830352E363736353038342D3930352D33343832383739353337363138392F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926806.415:60632): pid=450618 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926806.418:60633): pid=450618 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=BPF msg=audit(1764926807.052:60634): prog-id=2331 op=LOAD type=BPF msg=audit(1764926807.052:60635): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926807.052:60636): prog-id=2332 op=LOAD type=BPF msg=audit(1764926807.052:60637): prog-id=2333 op=LOAD type=BPF msg=audit(1764926807.052:60638): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926807.052:60639): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926807.055:60640): prog-id=2334 op=LOAD type=BPF msg=audit(1764926807.055:60641): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926807.055:60642): prog-id=2335 op=LOAD type=BPF msg=audit(1764926807.055:60643): prog-id=2336 op=LOAD type=BPF msg=audit(1764926807.055:60644): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926807.055:60645): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926807.064:60646): prog-id=2337 op=LOAD type=BPF msg=audit(1764926807.064:60647): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926807.064:60648): prog-id=2338 op=LOAD type=BPF msg=audit(1764926807.064:60649): prog-id=2339 op=LOAD type=BPF msg=audit(1764926807.064:60650): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926807.064:60651): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926807.065:60652): prog-id=2340 op=LOAD type=BPF msg=audit(1764926807.065:60653): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1764926807.144:60654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926807.144:60655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926807.169:60656): pid=450618 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926807.169:60657): pid=450618 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926807.173:60658): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926807.173:60659): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926807.189:60660): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926807.189:60661): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926807.190:60662): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450663 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926807.216:60663): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926807.216:60664): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926808.826:60665): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926808.826:60666): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926808.827:60667): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450677 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926808.856:60668): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926808.856:60669): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926808.866:60670): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926808.867:60671): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926808.868:60672): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450690 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926808.902:60673): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926808.902:60674): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926808.927:60675): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926808.927:60676): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926808.929:60677): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450709 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926808.982:60678): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926808.983:60679): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926808.996:60680): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926808.996:60681): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926808.998:60682): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450722 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926809.027:60683): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926809.027:60684): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926809.041:60685): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926809.041:60686): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926809.043:60687): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450736 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926809.108:60688): pid=450752 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926809.108:60689): pid=450752 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78776470626377667165617579777064737A7761637A7661746C716662627469203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830382E383538373637352D3933352D34313339313238363937383037312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926809.110:60690): pid=450752 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926809.116:60691): pid=450752 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926809.343:60692): pid=450752 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926809.343:60693): pid=450752 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926809.347:60694): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926809.347:60695): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926809.359:60696): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926809.359:60697): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926809.360:60698): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450755 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926809.388:60699): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926809.388:60700): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926809.477:60701): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926809.477:60702): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926809.478:60703): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450769 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926809.508:60704): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926809.508:60705): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926809.521:60706): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926809.521:60707): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926809.522:60708): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450782 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926809.558:60709): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926809.558:60710): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926809.590:60711): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926809.590:60712): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926809.591:60713): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450801 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926809.639:60714): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926809.639:60715): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926809.657:60716): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926809.657:60717): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926809.658:60718): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450814 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926809.688:60719): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926809.688:60720): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926809.699:60721): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926809.699:60722): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926809.701:60723): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450828 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926809.765:60724): pid=450844 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926809.766:60725): pid=450844 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74796F70636E776F627779716E7169766972797964736B6578776661696A6979203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830392E353130383136332D3935392D3130353333363231363733353131332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926809.766:60726): pid=450844 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926809.769:60727): pid=450844 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926809.988:60728): pid=450844 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926809.988:60729): pid=450844 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926809.991:60730): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926809.991:60731): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926810.012:60732): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926810.013:60733): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926810.014:60734): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450847 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926810.049:60735): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926810.049:60736): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926810.060:60737): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926810.060:60738): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926810.061:60739): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450860 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926810.089:60740): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926810.089:60741): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926810.109:60742): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926810.109:60743): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926810.112:60744): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450874 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926810.155:60745): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926810.155:60746): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926810.168:60747): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926810.168:60748): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926810.170:60749): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450887 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926810.196:60750): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926810.196:60751): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926810.213:60752): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926810.213:60753): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926810.214:60754): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450901 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926810.274:60755): pid=450917 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926810.274:60756): pid=450917 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75627A767A696876726265626D6B7274726276656D6966717671776577657865203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363830392E353130383136332D3935392D3130353333363231363733353131332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926810.275:60757): pid=450917 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926810.278:60758): pid=450917 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926810.502:60759): pid=450917 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926810.502:60760): pid=450917 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926810.505:60761): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926810.505:60762): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926810.517:60763): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926810.517:60764): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926810.518:60765): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450920 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926810.544:60766): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926810.544:60767): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926810.906:60768): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926810.906:60769): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926810.908:60770): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450934 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926810.936:60771): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926810.936:60772): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926810.947:60773): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926810.947:60774): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926810.948:60775): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450947 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926810.979:60776): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926810.979:60777): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926811.003:60778): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926811.003:60779): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926811.004:60780): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450966 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926811.043:60781): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926811.043:60782): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926811.061:60783): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926811.061:60784): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926811.062:60785): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450979 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926811.088:60786): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926811.088:60787): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926811.102:60788): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926811.102:60789): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926811.104:60790): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=450993 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926811.167:60791): pid=451009 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926811.167:60792): pid=451009 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7765716977646A656A6E647278687378666C7A77636F6B766167656D677365203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363831302E393338343232372D313031302D39393936323139383839303539352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926811.168:60793): pid=451009 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926811.171:60794): pid=451009 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926811.428:60795): pid=451009 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926811.428:60796): pid=451009 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926811.432:60797): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926811.432:60798): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926811.444:60799): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926811.444:60800): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926811.445:60801): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451012 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926811.464:60802): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926811.464:60803): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926811.603:60804): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926811.603:60805): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926811.604:60806): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451026 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926811.633:60807): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926811.633:60808): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926811.644:60809): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926811.645:60810): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926811.646:60811): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451039 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926811.669:60812): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926811.669:60813): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926811.694:60814): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926811.694:60815): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926811.695:60816): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451058 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926811.727:60817): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926811.727:60818): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926811.738:60819): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926811.738:60820): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926811.739:60821): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451071 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926811.759:60822): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926811.759:60823): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926811.771:60824): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926811.771:60825): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926811.772:60826): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451085 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926811.813:60827): pid=451101 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926811.814:60828): pid=451101 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7175786F6C64677774786E6B786C686476626B6B6561787378646D7667707368203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363831312E363332393633322D313033342D34373133383531373334333638332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926811.814:60829): pid=451101 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926811.816:60830): pid=451101 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926812.040:60831): pid=451101 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926812.040:60832): pid=451101 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926812.044:60833): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926812.044:60834): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926812.063:60835): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926812.063:60836): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926812.065:60837): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451104 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926812.104:60838): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926812.104:60839): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926812.120:60840): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926812.120:60841): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926812.121:60842): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451117 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926812.145:60843): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926812.145:60844): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926812.163:60845): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926812.163:60846): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926812.164:60847): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451131 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926812.212:60848): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926812.212:60849): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926812.225:60850): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926812.225:60851): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926812.226:60852): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451144 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926812.251:60853): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926812.251:60854): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926812.265:60855): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926812.265:60856): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926812.266:60857): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451158 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926812.326:60858): pid=451174 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926812.326:60859): pid=451174 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7077756B64757467757977646F61646366616E6A61646C646D6E756B736F7265203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363831312E363332393633322D313033342D34373133383531373334333638332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926812.326:60860): pid=451174 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926812.329:60861): pid=451174 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926812.530:60862): pid=451174 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926812.530:60863): pid=451174 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926812.533:60864): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926812.533:60865): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926812.545:60866): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926812.545:60867): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926812.546:60868): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451177 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926812.565:60869): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926812.566:60870): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926812.672:60871): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926812.672:60872): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926812.673:60873): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451191 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926812.701:60874): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926812.702:60875): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926812.716:60876): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926812.716:60877): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926812.717:60878): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451204 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926812.751:60879): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926812.751:60880): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926812.772:60881): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926812.772:60882): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926812.774:60883): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451223 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926812.819:60884): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926812.819:60885): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926812.835:60886): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926812.835:60887): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926812.836:60888): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451236 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926812.864:60889): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926812.864:60890): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926812.876:60891): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926812.876:60892): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926812.878:60893): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451250 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926812.938:60894): pid=451266 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926812.938:60895): pid=451266 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6165717766736C6B64717179786D7A7470636B7274746E716869736465756B62203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363831322E3730343635332D313037392D3138353234363737353632313232392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926812.939:60896): pid=451266 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926812.941:60897): pid=451266 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926813.139:60898): pid=451266 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926813.140:60899): pid=451266 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926813.143:60900): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926813.143:60901): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926813.158:60902): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926813.159:60903): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926813.160:60904): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451269 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926813.184:60905): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926813.184:60906): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926813.303:60907): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926813.303:60908): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926813.305:60909): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451283 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926813.326:60910): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926813.327:60911): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926813.341:60912): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926813.341:60913): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926813.342:60914): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451296 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926813.367:60915): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926813.367:60916): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926813.390:60917): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926813.390:60918): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926813.391:60919): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451315 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926813.435:60920): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926813.436:60921): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926813.449:60922): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926813.449:60923): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926813.451:60924): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451328 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926813.478:60925): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926813.478:60926): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926813.534:60927): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926813.535:60928): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926813.536:60929): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451342 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926813.596:60930): pid=451358 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926813.596:60931): pid=451358 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75656A6E6B7265686C706B74616D6F64737A79616679646B6A68776478646578203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363831332E3332383835362D313130332D313433303939363335313231312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926813.597:60932): pid=451358 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926813.600:60933): pid=451358 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926813.811:60934): pid=451358 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926813.811:60935): pid=451358 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926813.815:60936): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926813.815:60937): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926813.835:60938): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926813.835:60939): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926813.837:60940): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451362 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926813.868:60941): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926813.868:60942): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926813.879:60943): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926813.879:60944): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926813.881:60945): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451375 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926813.908:60946): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926813.908:60947): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926813.928:60948): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926813.929:60949): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926813.930:60950): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451389 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926813.970:60951): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926813.970:60952): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926813.982:60953): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926813.982:60954): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926813.983:60955): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451402 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926814.011:60956): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926814.011:60957): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_START msg=audit(1764926814.015:60958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926814.019:60959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926814.022:60960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926814.026:60961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926814.027:60962): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926814.027:60963): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_START msg=audit(1764926814.029:60964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926814.029:60965): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451420 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=SERVICE_START msg=audit(1764926814.033:60966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764926814.066:60967): pid=451468 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926814.066:60968): pid=451468 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7662767978637264786E6F776675656562716C61636A726262737A6A6373687A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363831332E3332383835362D313130332D313433303939363335313231312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926814.066:60969): pid=451468 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926814.068:60970): pid=451468 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926814.281:60971): pid=451468 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926814.281:60972): pid=451468 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926814.285:60973): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926814.285:60974): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926814.296:60975): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926814.296:60976): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926814.298:60977): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451579 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=SERVICE_STOP msg=audit(1764926814.317:60978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926814.320:60979): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926814.320:60980): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_STOP msg=audit(1764926814.336:60981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926814.354:60982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926814.402:60983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926814.430:60984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926814.537:60985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926814.663:60986): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926814.663:60987): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926814.664:60988): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451615 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926814.689:60989): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926814.689:60990): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926814.698:60991): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926814.699:60992): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926814.700:60993): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451628 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926814.729:60994): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926814.729:60995): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926814.897:60996): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926814.897:60997): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926814.898:60998): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451647 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926814.945:60999): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926814.945:61000): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926814.959:61001): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926814.959:61002): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926814.961:61003): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451660 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926814.994:61004): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926814.994:61005): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926815.014:61006): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926815.014:61007): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926815.016:61008): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451674 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926815.083:61009): pid=451690 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926815.084:61010): pid=451690 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6478656F726E677A68746D747268746779696B74726E64626270627265617263203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363831342E363930393836322D313135342D3237373336353538323530393338352F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F646174612E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926815.085:61011): pid=451690 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926815.089:61012): pid=451690 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926815.374:61013): pid=451690 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926815.374:61014): pid=451690 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926815.378:61015): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926815.378:61016): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926815.392:61017): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926815.392:61018): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926815.394:61019): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451693 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926815.421:61020): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926815.421:61021): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926815.540:61022): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926815.541:61023): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926815.542:61024): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451707 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926815.570:61025): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926815.570:61026): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926815.585:61027): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926815.585:61028): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926815.586:61029): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451720 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926815.620:61030): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926815.620:61031): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926815.783:61032): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926815.783:61033): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926815.785:61034): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451739 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926815.836:61035): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926815.836:61036): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926815.852:61037): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926815.852:61038): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926815.853:61039): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451752 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926815.885:61040): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926815.885:61041): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926815.898:61042): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926815.898:61043): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926815.899:61044): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451766 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926815.954:61045): pid=451782 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926815.954:61046): pid=451782 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626A74766C6F70696A64727A7273726C74687865617A786E65737A796C6A656A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363831352E353732363037382D313138312D3137373737303538363935303234392F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F686173682E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926815.955:61047): pid=451782 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926815.958:61048): pid=451782 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926816.161:61049): pid=451782 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926816.162:61050): pid=451782 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926816.165:61051): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926816.165:61052): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926816.184:61053): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926816.185:61054): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926816.186:61055): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451785 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926816.216:61056): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926816.216:61057): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926816.826:61058): pid=451800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926816.985:61059): pid=451799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=451800 suid=74 rport=10370 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926816.985:61060): pid=451799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=451800 suid=74 rport=10370 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764926817.005:61061): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926817.005:61062): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926817.006:61063): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451801 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926817.036:61064): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926817.036:61065): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926817.049:61066): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926817.049:61067): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926817.051:61068): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451814 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926817.085:61069): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926817.086:61070): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926817.257:61071): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926817.257:61072): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926817.259:61073): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451833 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926817.308:61074): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926817.308:61075): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926817.319:61076): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926817.319:61077): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926817.320:61078): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451846 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926817.350:61079): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926817.350:61080): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926817.360:61081): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926817.360:61082): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926817.362:61083): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451860 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926817.426:61084): pid=451876 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926817.427:61085): pid=451876 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B76617078736C63646C726B6B66796F676A786A7A7376716F73687668617968203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363831372E3033383531342D313230382D39303539333530373736303137342F416E736962616C6C5A5F706F646D616E5F636F6E7461696E65725F696E666F2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926817.428:61086): pid=451876 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926817.431:61087): pid=451876 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926817.887:61088): pid=451799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=451800 suid=74 rport=10370 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926817.888:61089): pid=451799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451800 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926817.889:61090): pid=451799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.228.135.173 addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926817.889:61091): pid=451799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926817.889:61092): pid=451799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1764926818.463:61093): pid=451876 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926818.464:61094): pid=451876 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926818.468:61095): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926818.468:61096): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926818.897:61097): pid=451907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926819.004:61098): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926819.004:61099): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926819.006:61100): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451908 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926819.038:61101): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926819.038:61102): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_SESSION msg=audit(1764926822.441:61103): pid=451906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=451907 suid=74 rport=50480 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926822.442:61104): pid=451906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=451907 suid=74 rport=50480 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764926824.017:61105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926824.165:61106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926824.790:61107): pid=451906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=451907 suid=74 rport=50480 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926824.791:61108): pid=451906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451907 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926824.792:61109): pid=451906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.163.234 addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926824.793:61110): pid=451906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926824.793:61111): pid=451906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926827.816:61112): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926827.816:61113): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926827.819:61114): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451947 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926827.847:61115): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926827.847:61116): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926827.861:61117): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926827.861:61118): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926827.863:61119): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451960 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926827.898:61120): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926827.898:61121): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926828.168:61122): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926828.169:61123): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926828.170:61124): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451979 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926828.223:61125): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926828.224:61126): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926828.238:61127): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926828.238:61128): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926828.239:61129): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=451992 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926828.272:61130): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926828.273:61131): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926828.292:61132): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926828.292:61133): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926828.294:61134): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452006 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926828.363:61135): pid=452022 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926828.363:61136): pid=452022 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E6874747178637875636F79666168656A716C7069647170646174726F6B6C203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363832372E383530373136382D313234372D3233383638353734333531393333392F416E736962616C6C5A5F6564706D5F636F6E7461696E65725F6D616E6167652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926828.365:61137): pid=452022 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926828.369:61138): pid=452022 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926829.129:61139): pid=452022 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926829.129:61140): pid=452022 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926829.133:61141): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926829.133:61142): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926829.154:61143): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926829.154:61144): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926829.155:61145): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452104 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926829.188:61146): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926829.188:61147): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926829.728:61148): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926829.728:61149): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926829.730:61150): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452118 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926829.766:61151): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926829.766:61152): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926829.779:61153): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926829.779:61154): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926829.780:61155): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452131 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926829.815:61156): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926829.816:61157): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926829.851:61158): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926829.851:61159): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926829.853:61160): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452150 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926829.908:61161): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926829.908:61162): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926829.921:61163): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926829.921:61164): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926829.923:61165): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452163 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926829.956:61166): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926829.956:61167): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926829.969:61168): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926829.969:61169): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926829.971:61170): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452177 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926830.040:61171): pid=452193 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926830.041:61172): pid=452193 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B736F77636277787566677A6C62617A6669646E6E676272786A6C706C656277203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363832392E373637393630332D313237312D3138303036323734353033343832362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926830.042:61173): pid=452193 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926830.046:61174): pid=452193 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926830.269:61175): pid=452193 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926830.270:61176): pid=452193 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926830.273:61177): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926830.273:61178): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926830.287:61179): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926830.287:61180): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926830.288:61181): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452198 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926830.318:61182): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926830.318:61183): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926830.504:61184): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926830.504:61185): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926830.506:61186): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452212 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926830.537:61187): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926830.537:61188): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926830.558:61189): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926830.558:61190): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926830.559:61191): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452225 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926830.593:61192): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926830.593:61193): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926830.618:61194): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926830.618:61195): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926830.620:61196): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452244 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926830.679:61197): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926830.679:61198): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926830.691:61199): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926830.691:61200): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926830.692:61201): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452268 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926830.726:61202): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926830.726:61203): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926830.739:61204): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926830.739:61205): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926830.740:61206): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452287 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926830.809:61207): pid=452308 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926830.809:61208): pid=452308 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747A6F666672656B666775706A696366666E736C65757476626E616E74717878203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363833302E3533393334312D313239382D3230393538363437383636303633322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926830.810:61209): pid=452308 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926830.814:61210): pid=452308 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926831.068:61211): pid=452308 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926831.069:61212): pid=452308 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926831.073:61213): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926831.073:61214): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926831.095:61215): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926831.095:61216): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926831.096:61217): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452323 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926831.134:61218): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926831.134:61219): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926831.148:61220): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926831.148:61221): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926831.149:61222): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452336 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926831.175:61223): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926831.175:61224): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926831.188:61225): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926831.188:61226): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926831.190:61227): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452350 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926831.253:61228): pid=452366 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926831.253:61229): pid=452366 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626B6E6C687A656D737561716768797564706B6777676E797A7862756B796373203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363833302E3533393334312D313239382D3230393538363437383636303633322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926831.254:61230): pid=452366 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926831.256:61231): pid=452366 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926831.499:61232): pid=452366 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926831.499:61233): pid=452366 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926831.502:61234): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926831.502:61235): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926831.513:61236): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926831.513:61237): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926831.514:61238): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452369 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926831.537:61239): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926831.537:61240): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926831.549:61241): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926831.549:61242): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926831.550:61243): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452382 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926831.570:61244): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926831.570:61245): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926831.697:61246): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926831.697:61247): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926831.698:61248): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452401 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926831.727:61249): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926831.728:61250): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926831.749:61251): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926831.750:61252): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926831.751:61253): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452414 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926831.795:61254): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926831.795:61255): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926831.807:61256): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926831.808:61257): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926831.809:61258): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452427 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926831.832:61259): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926831.833:61260): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926831.845:61261): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926831.845:61262): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926831.847:61263): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452441 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926831.906:61264): pid=452457 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926831.907:61265): pid=452457 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7673686A747366696D646B686965716876646A7561736179626C6E6E72746A78203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363833312E3533393733352D313239382D39333533343036333033333538372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926831.908:61266): pid=452457 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926831.910:61267): pid=452457 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926832.126:61268): pid=452457 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926832.126:61269): pid=452457 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926832.129:61270): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926832.130:61271): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926832.150:61272): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926832.150:61273): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926832.151:61274): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452460 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926832.199:61275): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926832.199:61276): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926832.212:61277): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926832.212:61278): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926832.213:61279): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452473 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926832.235:61280): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926832.236:61281): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926832.247:61282): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926832.247:61283): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926832.248:61284): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452487 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926832.298:61285): pid=452503 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926832.298:61286): pid=452503 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6B6C7170777A71627962746A737963636F696A6C647663717869616A6B656D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363833312E3533393733352D313239382D39333533343036333033333538372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926832.298:61287): pid=452503 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926832.300:61288): pid=452503 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=BPF msg=audit(1764926832.930:61289): prog-id=2341 op=LOAD type=BPF msg=audit(1764926832.931:61290): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926832.931:61291): prog-id=2342 op=LOAD type=BPF msg=audit(1764926832.931:61292): prog-id=2343 op=LOAD type=BPF msg=audit(1764926832.931:61293): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926832.931:61294): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926832.934:61295): prog-id=2344 op=LOAD type=BPF msg=audit(1764926832.934:61296): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926832.934:61297): prog-id=2345 op=LOAD type=BPF msg=audit(1764926832.935:61298): prog-id=2346 op=LOAD type=BPF msg=audit(1764926832.935:61299): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926832.935:61300): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926832.944:61301): prog-id=2347 op=LOAD type=BPF msg=audit(1764926832.945:61302): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926832.945:61303): prog-id=2348 op=LOAD type=BPF msg=audit(1764926832.945:61304): prog-id=2349 op=LOAD type=BPF msg=audit(1764926832.945:61305): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926832.945:61306): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926832.946:61307): prog-id=2350 op=LOAD type=BPF msg=audit(1764926832.946:61308): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764926832.980:61309): pid=452503 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926832.980:61310): pid=452503 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926832.984:61311): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926832.984:61312): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926833.191:61313): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926833.191:61314): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926833.193:61315): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452543 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926833.249:61316): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926833.250:61317): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926833.264:61318): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926833.264:61319): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926833.265:61320): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452556 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926833.292:61321): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926833.293:61322): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926833.305:61323): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926833.305:61324): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926833.307:61325): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452570 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764926833.363:61326): pid=452586 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764926833.363:61327): pid=452586 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77626E6D736E6D6E63727366706F616F6B6E617A67647A6C71616477776C6E7A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932363833312E3533393733352D313239382D39333533343036333033333538372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764926833.364:61328): pid=452586 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764926833.369:61329): pid=452586 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=BPF msg=audit(1764926834.033:61330): prog-id=2351 op=LOAD type=BPF msg=audit(1764926834.033:61331): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.033:61332): prog-id=2352 op=LOAD type=BPF msg=audit(1764926834.033:61333): prog-id=2353 op=LOAD type=BPF msg=audit(1764926834.033:61334): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.033:61335): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.036:61336): prog-id=2354 op=LOAD type=BPF msg=audit(1764926834.036:61337): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.036:61338): prog-id=2355 op=LOAD type=BPF msg=audit(1764926834.036:61339): prog-id=2356 op=LOAD type=BPF msg=audit(1764926834.036:61340): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.036:61341): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.045:61342): prog-id=2357 op=LOAD type=BPF msg=audit(1764926834.045:61343): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.045:61344): prog-id=2358 op=LOAD type=BPF msg=audit(1764926834.045:61345): prog-id=2359 op=LOAD type=BPF msg=audit(1764926834.045:61346): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.045:61347): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.047:61348): prog-id=2360 op=LOAD type=BPF msg=audit(1764926834.047:61349): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.234:61350): prog-id=2361 op=LOAD type=SYSCALL msg=audit(1764926834.234:61350): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc64f97be0 a2=90 a3=9500000001 items=0 ppid=452644 pid=452645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764926834.234:61350): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353761393632656138393031636464316234376362356336393236333439 type=SERVICE_START msg=audit(1764926834.305:61351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764926834.306:61352): pid=452650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1764926834.307:61353): pid=452650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1764926834.308:61354): pid=452650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764926834.311:61355): pid=452650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926834.383:61356): pid=452650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1764926834.383:61357): pid=452650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764926834.397:61358): pid=452680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1764926834.397:61359): pid=452680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_copy_cacerts" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1764926834.397:61360): pid=452680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764926834.398:61361): pid=452680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926834.402:61362): pid=452680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1764926834.402:61363): pid=452680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926834.558:61364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764926834.873:61365): prog-id=2362 op=LOAD type=BPF msg=audit(1764926834.873:61366): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.874:61367): prog-id=2363 op=LOAD type=BPF msg=audit(1764926834.874:61368): prog-id=2364 op=LOAD type=BPF msg=audit(1764926834.874:61369): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.874:61370): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.877:61371): prog-id=2365 op=LOAD type=BPF msg=audit(1764926834.877:61372): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.877:61373): prog-id=2366 op=LOAD type=BPF msg=audit(1764926834.877:61374): prog-id=2367 op=LOAD type=BPF msg=audit(1764926834.877:61375): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.877:61376): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.886:61377): prog-id=2368 op=LOAD type=BPF msg=audit(1764926834.886:61378): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.886:61379): prog-id=2369 op=LOAD type=BPF msg=audit(1764926834.886:61380): prog-id=2370 op=LOAD type=BPF msg=audit(1764926834.886:61381): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.886:61382): prog-id=0 op=UNLOAD type=BPF msg=audit(1764926834.888:61383): prog-id=2371 op=LOAD type=BPF msg=audit(1764926834.888:61384): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1764926834.902:61385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_ovn_metadata_agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926834.957:61386): pid=452586 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764926834.958:61387): pid=452586 uid=1000 auid=1000 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764926834.964:61388): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926834.964:61389): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGIN msg=audit(1764926835.001:61390): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764926835.001:61391): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926835.002:61392): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452737 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926835.033:61393): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764926835.033:61394): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926835.631:61395): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=447050 suid=1000 rport=39640 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926835.632:61396): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447050 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764926835.635:61397): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1764926835.635:61398): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764926835.636:61399): pid=447045 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=447045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=USER_ACCT msg=audit(1764926836.176:61400): pid=452752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1764926836.177:61401): pid=452752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2E636F6E662E64202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E6E616D6573706163655F636D64202D2D707269767365705F736F636B5F70617468202F746D702F746D70327A3571306538692F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1764926836.178:61402): pid=452752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764926836.180:61403): pid=452752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926836.791:61404): pid=452752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1764926836.791:61405): pid=452752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926836.871:61406): pid=452764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926837.121:61407): pid=452763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=452764 suid=74 rport=42182 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926837.121:61408): pid=452763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=452764 suid=74 rport=42182 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926838.488:61409): pid=452763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=452764 suid=74 rport=42182 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926838.488:61410): pid=452763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452764 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926838.488:61411): pid=452763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=13.229.105.114 addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926838.489:61412): pid=452763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=452763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926838.489:61413): pid=452763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926843.065:61414): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926843.065:61415): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926843.126:61416): pid=452768 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926843.126:61417): pid=452768 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926843.127:61418): pid=452768 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926843.132:61419): pid=452768 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926843.134:61420): pid=452768 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926843.134:61421): pid=452768 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926843.142:61422): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926843.142:61423): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764926843.160:61424): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926843.160:61425): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926843.218:61426): pid=452783 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926843.218:61427): pid=452783 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926843.218:61428): pid=452783 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926843.220:61429): pid=452783 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926843.753:61430): pid=452783 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926843.754:61431): pid=452783 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926843.784:61432): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926843.784:61433): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764926845.012:61434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926845.016:61435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926845.020:61436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926845.023:61437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926845.027:61438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926845.031:61439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926845.287:61440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926845.350:61441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926845.387:61442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926845.404:61443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926845.421:61444): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926845.421:61445): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_STOP msg=audit(1764926845.439:61446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764926845.484:61447): pid=452999 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926845.484:61448): pid=452999 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926845.485:61449): pid=452999 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926845.489:61450): pid=452999 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926845.491:61451): pid=452999 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926845.492:61452): pid=452999 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_STOP msg=audit(1764926845.493:61453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764926845.495:61454): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926845.495:61455): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_STOP msg=audit(1764926845.761:61456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926849.100:61457): pid=453017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926849.137:61458): pid=453016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453017 suid=74 rport=44070 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926849.138:61459): pid=453016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453017 suid=74 rport=44070 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926849.434:61460): pid=453016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=453017 suid=74 rport=44070 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926849.434:61461): pid=453016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453017 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926849.435:61462): pid=453016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=12.189.234.28 addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926849.435:61463): pid=453016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926849.435:61464): pid=453016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926853.261:61465): pid=453025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926853.367:61466): pid=453024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453025 suid=74 rport=33636 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926853.368:61467): pid=453024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453025 suid=74 rport=33636 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926854.011:61468): pid=453024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=453025 suid=74 rport=33636 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926854.011:61469): pid=453024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453025 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926854.011:61470): pid=453024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.185.99.40 addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926854.012:61471): pid=453024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926854.012:61472): pid=453024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926855.015:61473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926855.176:61474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926865.013:61475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926865.157:61476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926875.280:61477): pid=453072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926875.534:61478): pid=453071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453072 suid=74 rport=48676 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926875.534:61479): pid=453071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453072 suid=74 rport=48676 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764926876.014:61480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926876.017:61481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926876.021:61482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926876.025:61483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926876.029:61484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926876.032:61485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926876.285:61486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926876.364:61487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926876.400:61488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926876.427:61489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926876.537:61490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926876.599:61491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926882.912:61492): pid=453071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=453072 suid=74 rport=48676 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926882.912:61493): pid=453071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453072 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926882.913:61494): pid=453071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.225.21 addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926882.914:61495): pid=453071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926882.914:61496): pid=453071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926884.208:61497): pid=453245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926884.361:61498): pid=453244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453245 suid=74 rport=2629 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926884.362:61499): pid=453244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453245 suid=74 rport=2629 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926885.237:61500): pid=453244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=453245 suid=74 rport=2629 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926885.237:61501): pid=453244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453245 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926885.238:61502): pid=453244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.228.135.173 addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926885.238:61503): pid=453244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926885.238:61504): pid=453244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926885.264:61505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926885.418:61506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926896.011:61507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926896.160:61508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926897.345:61509): pid=453327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926897.424:61510): pid=453326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=453327 suid=74 rport=47768 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926897.424:61511): pid=453326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=453327 suid=74 rport=47768 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926897.761:61512): pid=453326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=453327 suid=74 rport=47768 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926897.761:61513): pid=453326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453327 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926897.762:61514): pid=453326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926897.763:61515): pid=453326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926897.763:61516): pid=453326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926900.104:61517): pid=453333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453333 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926900.345:61518): pid=453331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453333 suid=74 rport=45320 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926900.346:61519): pid=453331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453333 suid=74 rport=45320 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926901.707:61520): pid=453331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=453333 suid=74 rport=45320 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926901.707:61521): pid=453331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453333 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926901.707:61522): pid=453331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.106.194.74 addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926901.708:61523): pid=453331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926901.708:61524): pid=453331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926905.882:61525): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926905.882:61526): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926905.948:61527): pid=453334 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926905.948:61528): pid=453334 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926905.949:61529): pid=453334 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926905.954:61530): pid=453334 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926905.957:61531): pid=453334 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926905.957:61532): pid=453334 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926905.964:61533): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926905.964:61534): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764926905.986:61535): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926905.986:61536): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926906.049:61537): pid=453349 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926906.049:61538): pid=453349 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926906.050:61539): pid=453349 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926906.052:61540): pid=453349 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926906.730:61541): pid=453349 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926906.730:61542): pid=453349 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926906.962:61543): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926906.962:61544): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764926907.002:61545): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926907.002:61546): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926907.040:61547): pid=453395 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926907.040:61548): pid=453395 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926907.041:61549): pid=453395 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_START msg=audit(1764926907.052:61550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926907.056:61551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926907.059:61552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926907.062:61553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926907.066:61554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926907.070:61555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764926907.077:61556): pid=453395 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926907.081:61557): pid=453395 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926907.081:61558): pid=453395 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926907.084:61559): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926907.084:61560): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_STOP msg=audit(1764926907.301:61561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926907.432:61562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926907.457:61563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926907.483:61564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926907.578:61565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926907.640:61566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926912.018:61567): pid=453586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453586 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926912.056:61568): pid=453585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453586 suid=74 rport=56959 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926912.056:61569): pid=453585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453586 suid=74 rport=56959 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926912.355:61570): pid=453585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=453586 suid=74 rport=56959 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926912.355:61571): pid=453585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453586 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926912.356:61572): pid=453585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=12.189.234.28 addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926912.356:61573): pid=453585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926912.356:61574): pid=453585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926916.009:61575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926916.167:61576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926917.768:61577): pid=453613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926918.010:61578): pid=453612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453613 suid=74 rport=52874 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926918.011:61579): pid=453612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453613 suid=74 rport=52874 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926919.335:61580): pid=453612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=453613 suid=74 rport=52874 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926919.336:61581): pid=453612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453613 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926919.337:61582): pid=453612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=13.229.105.114 addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926919.337:61583): pid=453612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926919.338:61584): pid=453612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926927.008:61585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926927.195:61586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926935.279:61587): pid=453633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926935.382:61588): pid=453632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453633 suid=74 rport=52688 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926935.382:61589): pid=453632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453633 suid=74 rport=52688 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926936.000:61590): pid=453632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=453633 suid=74 rport=52688 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926936.001:61591): pid=453632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453633 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926936.001:61592): pid=453632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.185.99.40 addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926936.002:61593): pid=453632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926936.002:61594): pid=453632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926938.021:61595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926938.025:61596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926938.029:61597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926938.034:61598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926938.038:61599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926938.044:61600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926938.316:61601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926938.384:61602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926938.430:61603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926938.484:61604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926938.491:61605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926938.797:61606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926947.007:61607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926947.236:61608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926958.007:61609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926958.148:61610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926959.928:61611): pid=453889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926960.088:61612): pid=453888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453889 suid=74 rport=3103 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926960.088:61613): pid=453888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=453889 suid=74 rport=3103 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926961.001:61614): pid=453888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=453889 suid=74 rport=3103 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926961.001:61615): pid=453888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453889 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926961.002:61616): pid=453888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.228.135.173 addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926961.002:61617): pid=453888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=453888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926961.002:61618): pid=453888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764926967.484:61619): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926967.484:61620): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926967.551:61621): pid=453894 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926967.551:61622): pid=453894 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926967.553:61623): pid=453894 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926967.558:61624): pid=453894 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926967.561:61625): pid=453894 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926967.561:61626): pid=453894 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926967.565:61627): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926967.565:61628): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764926967.580:61629): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926967.580:61630): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926967.640:61631): pid=453909 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926967.641:61632): pid=453909 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926967.641:61633): pid=453909 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926967.645:61634): pid=453909 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926968.313:61635): pid=453909 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926968.313:61636): pid=453909 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926968.401:61637): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926968.401:61638): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764926968.592:61639): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764926968.592:61640): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764926968.639:61641): pid=453957 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764926968.639:61642): pid=453957 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764926968.640:61643): pid=453957 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764926968.647:61644): pid=453957 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926968.649:61645): pid=453957 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764926968.649:61646): pid=453957 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764926968.652:61647): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764926968.652:61648): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764926968.672:61649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926968.676:61650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926968.679:61651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926968.683:61652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926968.687:61653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926968.821:61654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926968.942:61655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926969.028:61656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926969.057:61657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926969.121:61658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926969.147:61659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926969.261:61660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926978.011:61661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926978.190:61662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926980.805:61663): pid=454167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764926980.841:61664): pid=454166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454167 suid=74 rport=41612 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764926980.841:61665): pid=454166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454167 suid=74 rport=41612 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926981.134:61666): pid=454166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454167 suid=74 rport=41612 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764926981.135:61667): pid=454166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454167 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764926981.135:61668): pid=454166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=12.189.234.28 addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764926981.136:61669): pid=454166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764926981.136:61670): pid=454166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926989.017:61671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926989.172:61672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926999.010:61673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926999.112:61674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926999.120:61675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926999.193:61676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926999.195:61677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926999.249:61678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764926999.313:61679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926999.357:61680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926999.470:61681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926999.529:61682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926999.582:61683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764926999.647:61684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927002.194:61685): pid=454357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927002.440:61686): pid=454356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454357 suid=74 rport=32840 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927002.440:61687): pid=454356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454357 suid=74 rport=32840 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927002.509:61688): pid=454359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454359 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927002.734:61689): pid=454358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454359 suid=74 rport=46340 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927002.735:61690): pid=454358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454359 suid=74 rport=46340 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927003.779:61691): pid=454356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454357 suid=74 rport=32840 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927003.779:61692): pid=454356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454357 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927003.780:61693): pid=454356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=13.229.105.114 addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927003.781:61694): pid=454356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927003.781:61695): pid=454356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927004.021:61696): pid=454358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454359 suid=74 rport=46340 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927004.021:61697): pid=454358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454359 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927004.021:61698): pid=454358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.106.194.74 addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927004.022:61699): pid=454358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927004.022:61700): pid=454358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927009.017:61701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927009.221:61702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927017.913:61703): pid=454420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927018.016:61704): pid=454419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454420 suid=74 rport=34846 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927018.016:61705): pid=454419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454420 suid=74 rport=34846 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927018.631:61706): pid=454419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454420 suid=74 rport=34846 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927018.631:61707): pid=454419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454420 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927018.632:61708): pid=454419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.185.99.40 addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927018.633:61709): pid=454419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454419 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927018.633:61710): pid=454419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927019.599:61711): pid=454422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764927020.010:61712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927020.176:61713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764927020.541:61714): pid=454421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454422 suid=74 rport=40986 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927020.541:61715): pid=454421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454422 suid=74 rport=40986 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927023.190:61716): pid=454421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454422 suid=74 rport=40986 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927023.190:61717): pid=454421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454422 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927023.191:61718): pid=454421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.225.21 addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927023.192:61719): pid=454421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454421 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927023.192:61720): pid=454421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927029.030:61721): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927029.030:61722): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927029.083:61723): pid=454446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927029.084:61724): pid=454446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927029.085:61725): pid=454446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927029.090:61726): pid=454446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927029.093:61727): pid=454446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927029.093:61728): pid=454446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927029.097:61729): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927029.097:61730): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927029.101:61731): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927029.101:61732): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927029.147:61733): pid=454461 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927029.147:61734): pid=454461 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927029.148:61735): pid=454461 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927029.150:61736): pid=454461 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927029.759:61737): pid=454461 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927029.760:61738): pid=454461 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927029.788:61739): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927029.789:61740): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927030.014:61741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927030.018:61742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927030.022:61743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927030.025:61744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927030.030:61745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927030.034:61746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927030.120:61747): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927030.120:61748): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927030.169:61749): pid=454567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927030.170:61750): pid=454567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927030.170:61751): pid=454567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927030.175:61752): pid=454567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927030.177:61753): pid=454567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927030.177:61754): pid=454567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927030.183:61755): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927030.183:61756): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_STOP msg=audit(1764927030.243:61757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927030.271:61758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927030.297:61759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927030.440:61760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927030.545:61761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927030.610:61762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927030.889:61763): pid=454699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927030.970:61764): pid=454698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=454699 suid=74 rport=57752 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927030.970:61765): pid=454698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=454699 suid=74 rport=57752 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927031.321:61766): pid=454698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454699 suid=74 rport=57752 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927031.321:61767): pid=454698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454699 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927031.322:61768): pid=454698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927031.323:61769): pid=454698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927031.323:61770): pid=454698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927031.916:61771): pid=454701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927032.076:61772): pid=454700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454701 suid=74 rport=11498 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927032.076:61773): pid=454700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454701 suid=74 rport=11498 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927032.976:61774): pid=454700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454701 suid=74 rport=11498 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927032.977:61775): pid=454700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454701 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927032.977:61776): pid=454700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.228.135.173 addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927032.978:61777): pid=454700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927032.978:61778): pid=454700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927038.497:61779): pid=454445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764927040.006:61780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927040.199:61781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927046.706:61782): pid=454729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927046.744:61783): pid=454728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454729 suid=74 rport=54512 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927046.744:61784): pid=454728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=454729 suid=74 rport=54512 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927047.036:61785): pid=454728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454729 suid=74 rport=54512 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927047.036:61786): pid=454728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454729 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927047.037:61787): pid=454728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=12.189.234.28 addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927047.037:61788): pid=454728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454728 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927047.037:61789): pid=454728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=12.189.234.28 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927049.577:61790): pid=454730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764927049.862:61791): pid=454731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=454731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764927051.015:61792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927051.158:61793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927061.016:61794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927061.020:61795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927061.023:61796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927061.026:61797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927061.030:61798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927061.033:61799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927061.314:61800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927061.380:61801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927061.476:61802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927061.500:61803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927061.507:61804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927061.653:61805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927071.015:61806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927071.158:61807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927078.575:61808): pid=455005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455005 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927078.586:61809): pid=455004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455005 suid=74 rport=46802 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927078.586:61810): pid=455004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455005 suid=74 rport=46802 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927078.741:61811): pid=455004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=455005 suid=74 rport=46802 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927078.742:61812): pid=455004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455005 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927078.742:61813): pid=455004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=192.227.128.3 addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927078.743:61814): pid=455004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927078.743:61815): pid=455004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927082.010:61816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927082.117:61817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927082.211:61818): pid=455025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927082.464:61819): pid=455024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455025 suid=74 rport=41200 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927082.465:61820): pid=455024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455025 suid=74 rport=41200 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927083.839:61821): pid=455024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=455025 suid=74 rport=41200 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927083.839:61822): pid=455024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455025 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927083.840:61823): pid=455024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=13.229.105.114 addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927083.840:61824): pid=455024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927083.841:61825): pid=455024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=13.229.105.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927090.565:61826): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927090.565:61827): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927090.627:61828): pid=455030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927090.627:61829): pid=455030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927090.628:61830): pid=455030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927090.632:61831): pid=455030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927090.634:61832): pid=455030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927090.635:61833): pid=455030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927090.641:61834): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927090.641:61835): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927090.654:61836): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927090.654:61837): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927090.707:61838): pid=455045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927090.707:61839): pid=455045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927090.708:61840): pid=455045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927090.710:61841): pid=455045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927091.286:61842): pid=455045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927091.287:61843): pid=455045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927091.385:61844): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927091.385:61845): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927091.611:61846): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927091.611:61847): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927091.674:61848): pid=455093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927091.675:61849): pid=455093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927091.676:61850): pid=455093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927091.682:61851): pid=455093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927091.685:61852): pid=455093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927091.686:61853): pid=455093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927091.690:61854): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927091.690:61855): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927091.696:61856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927091.699:61857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927091.702:61858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927091.705:61859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927091.708:61860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927091.712:61861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927091.952:61862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927092.067:61863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927092.094:61864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927092.122:61865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927092.123:61866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927092.181:61867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927099.640:61868): pid=455287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455287 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927099.744:61869): pid=455286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455287 suid=74 rport=60220 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927099.744:61870): pid=455286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455287 suid=74 rport=60220 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927100.364:61871): pid=455286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=455287 suid=74 rport=60220 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927100.365:61872): pid=455286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455287 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927100.365:61873): pid=455286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.185.99.40 addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927100.366:61874): pid=455286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455286 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927100.366:61875): pid=455286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927100.805:61876): pid=455289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927101.036:61877): pid=455288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455289 suid=74 rport=47358 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927101.037:61878): pid=455288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455289 suid=74 rport=47358 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764927102.009:61879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927102.229:61880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927102.309:61881): pid=455288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=455289 suid=74 rport=47358 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927102.310:61882): pid=455288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455289 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927102.310:61883): pid=455288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.106.194.74 addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927102.311:61884): pid=455288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455288 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927102.311:61885): pid=455288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927102.851:61886): pid=455317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927103.008:61887): pid=455316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455317 suid=74 rport=4397 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927103.009:61888): pid=455316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455317 suid=74 rport=4397 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927103.900:61889): pid=455316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=455317 suid=74 rport=4397 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927103.901:61890): pid=455316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455317 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927103.902:61891): pid=455316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.228.135.173 addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927103.902:61892): pid=455316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927103.902:61893): pid=455316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927113.012:61894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927113.155:61895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927122.008:61896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927122.110:61897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927122.113:61898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927122.205:61899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927122.208:61900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927122.210:61901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927122.267:61902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927122.364:61903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927122.384:61904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927122.414:61905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927122.529:61906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927122.554:61907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927133.012:61908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927133.176:61909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927144.007:61910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927144.122:61911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927152.306:61912): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927152.306:61913): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927152.374:61914): pid=455590 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927152.374:61915): pid=455590 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927152.376:61916): pid=455590 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927152.390:61917): pid=455590 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_START msg=audit(1764927152.392:61918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764927152.393:61919): pid=455590 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927152.394:61920): pid=455590 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_START msg=audit(1764927152.395:61921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927152.401:61922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764927152.406:61923): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927152.406:61924): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927152.423:61925): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927152.423:61926): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927152.484:61927): pid=455631 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927152.484:61928): pid=455631 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927152.485:61929): pid=455631 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_START msg=audit(1764927152.500:61930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764927152.500:61931): pid=455631 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_START msg=audit(1764927152.563:61932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927152.569:61933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927152.743:61934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927152.793:61935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927152.844:61936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927152.985:61937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927153.063:61938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764927153.115:61939): pid=455631 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927153.115:61940): pid=455631 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_STOP msg=audit(1764927153.209:61941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764927153.218:61942): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927153.218:61943): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927153.548:61944): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927153.548:61945): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927153.611:61946): pid=455825 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927153.612:61947): pid=455825 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927153.613:61948): pid=455825 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927153.617:61949): pid=455825 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927153.620:61950): pid=455825 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927153.621:61951): pid=455825 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927153.625:61952): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927153.625:61953): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764927156.802:61954): pid=455841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927156.882:61955): pid=455840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=455841 suid=74 rport=49630 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927156.882:61956): pid=455840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=455841 suid=74 rport=49630 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927157.227:61957): pid=455840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=455841 suid=74 rport=49630 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927157.228:61958): pid=455840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455841 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927157.229:61959): pid=455840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927157.229:61960): pid=455840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927157.229:61961): pid=455840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927163.865:61962): pid=455844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455844 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764927164.013:61963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764927164.109:61964): pid=455843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455844 suid=74 rport=55342 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927164.110:61965): pid=455843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455844 suid=74 rport=55342 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1764927164.196:61966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927168.971:61967): pid=455843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=455844 suid=74 rport=55342 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927168.971:61968): pid=455843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455844 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927168.972:61969): pid=455843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.225.21 addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927168.973:61970): pid=455843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455843 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927168.973:61971): pid=455843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927172.937:61972): pid=455870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927173.091:61973): pid=455869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455870 suid=74 rport=19783 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927173.091:61974): pid=455869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455870 suid=74 rport=19783 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927173.962:61975): pid=455869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=455870 suid=74 rport=19783 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927173.963:61976): pid=455869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455870 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927173.963:61977): pid=455869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.228.135.173 addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927173.964:61978): pid=455869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927173.964:61979): pid=455869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=185.228.135.173 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927175.012:61980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927175.123:61981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927183.007:61982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927183.010:61983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927183.013:61984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927183.015:61985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927183.115:61986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927183.118:61987): pid=455941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764927183.225:61988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764927183.234:61989): pid=455937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455941 suid=74 rport=35052 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927183.234:61990): pid=455937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=455941 suid=74 rport=35052 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1764927183.324:61991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927183.343:61992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927183.377:61993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927183.389:61994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927183.414:61995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927183.597:61996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927183.870:61997): pid=455937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=455941 suid=74 rport=35052 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927183.870:61998): pid=455937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455941 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927183.872:61999): pid=455937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.185.99.40 addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927183.872:62000): pid=455937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=455937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927183.873:62001): pid=455937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927195.009:62002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927195.162:62003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927196.095:62004): pid=456117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=456117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927196.323:62005): pid=456116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=456117 suid=74 rport=48384 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927196.323:62006): pid=456116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=456117 suid=74 rport=48384 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927197.608:62007): pid=456116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=456117 suid=74 rport=48384 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927197.608:62008): pid=456116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=456117 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927197.608:62009): pid=456116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.106.194.74 addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927197.609:62010): pid=456116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=456116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927197.609:62011): pid=456116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927206.007:62012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927206.142:62013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927214.004:62014): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927214.004:62015): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927214.012:62016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927214.015:62017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927214.017:62018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927214.020:62019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927214.023:62020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927214.027:62021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764927214.060:62022): pid=456141 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927214.060:62023): pid=456141 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927214.062:62024): pid=456141 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927214.066:62025): pid=456141 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927214.067:62026): pid=456141 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927214.068:62027): pid=456141 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927214.072:62028): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927214.072:62029): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927214.074:62030): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927214.074:62031): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927214.117:62032): pid=456211 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927214.118:62033): pid=456211 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927214.118:62034): pid=456211 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927214.120:62035): pid=456211 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_STOP msg=audit(1764927214.225:62036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927214.281:62037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927214.300:62038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927214.306:62039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927214.332:62040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927214.512:62041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764927215.417:62042): pid=456211 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927215.418:62043): pid=456211 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927215.423:62044): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927215.423:62045): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927215.459:62046): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927215.459:62047): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927215.504:62048): pid=456495 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927215.505:62049): pid=456495 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927215.506:62050): pid=456495 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927215.511:62051): pid=456495 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927215.513:62052): pid=456495 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927215.513:62053): pid=456495 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927215.517:62054): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927215.517:62055): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927215.520:62056): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927215.520:62057): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927215.576:62058): pid=456510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927215.576:62059): pid=456510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927215.577:62060): pid=456510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927215.579:62061): pid=456510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927216.199:62062): pid=456510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927216.200:62063): pid=456510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927216.255:62064): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927216.255:62065): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927216.680:62066): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927216.680:62067): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927216.745:62068): pid=456556 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927216.746:62069): pid=456556 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927216.747:62070): pid=456556 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927216.750:62071): pid=456556 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927216.753:62072): pid=456556 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927216.754:62073): pid=456556 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927216.758:62074): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927216.758:62075): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927226.014:62076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927226.196:62077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927237.013:62078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927237.152:62079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927245.012:62080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927245.015:62081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927245.018:62082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927245.022:62083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927245.026:62084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927245.030:62085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927245.291:62086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927245.325:62087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927245.356:62088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927245.379:62089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927245.406:62090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927245.524:62091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927257.016:62092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927257.228:62093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927267.221:62094): pid=456845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=456845 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927267.324:62095): pid=456844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=456845 suid=74 rport=58468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927267.324:62096): pid=456844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=456845 suid=74 rport=58468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927267.942:62097): pid=456844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=456845 suid=74 rport=58468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927267.942:62098): pid=456844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=456845 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927267.943:62099): pid=456844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.185.99.40 addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927267.944:62100): pid=456844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=456844 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927267.944:62101): pid=456844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927267.962:62102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927268.104:62103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927276.013:62104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927276.018:62105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927276.023:62106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927276.029:62107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927276.034:62108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927276.040:62109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927276.328:62110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927276.352:62111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927276.394:62112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927276.484:62113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927276.504:62114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927276.555:62115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927277.136:62116): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927277.136:62117): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927277.183:62118): pid=457040 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927277.184:62119): pid=457040 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927277.185:62120): pid=457040 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927277.188:62121): pid=457040 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927277.190:62122): pid=457040 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927277.190:62123): pid=457040 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927277.193:62124): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927277.193:62125): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927277.195:62126): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927277.195:62127): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927277.235:62128): pid=457055 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927277.235:62129): pid=457055 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927277.236:62130): pid=457055 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927277.237:62131): pid=457055 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927277.696:62132): pid=457055 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927277.696:62133): pid=457055 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927277.700:62134): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927277.700:62135): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927277.733:62136): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927277.733:62137): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927277.793:62138): pid=457092 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927277.793:62139): pid=457092 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927277.793:62140): pid=457092 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927277.796:62141): pid=457092 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927277.798:62142): pid=457092 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927277.798:62143): pid=457092 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927277.802:62144): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927277.802:62145): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927277.805:62146): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927277.805:62147): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927277.849:62148): pid=457107 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927277.849:62149): pid=457107 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927277.850:62150): pid=457107 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927277.852:62151): pid=457107 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927278.449:62152): pid=457107 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927278.449:62153): pid=457107 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927278.511:62154): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927278.511:62155): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927278.590:62156): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927278.590:62157): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927278.631:62158): pid=457155 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927278.631:62159): pid=457155 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927278.632:62160): pid=457155 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927278.634:62161): pid=457155 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927278.637:62162): pid=457155 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927278.637:62163): pid=457155 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927278.640:62164): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927278.640:62165): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764927286.353:62166): pid=457171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927286.433:62167): pid=457170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=457171 suid=74 rport=50330 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927286.433:62168): pid=457170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=457171 suid=74 rport=50330 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927286.776:62169): pid=457170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=457171 suid=74 rport=50330 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927286.776:62170): pid=457170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457171 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927286.777:62171): pid=457170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927286.777:62172): pid=457170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927286.777:62173): pid=457170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927288.018:62174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927288.174:62175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927296.283:62176): pid=457197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927296.513:62177): pid=457196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=457197 suid=74 rport=49402 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927296.513:62178): pid=457196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=457197 suid=74 rport=49402 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927297.761:62179): pid=457196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=457197 suid=74 rport=49402 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927297.761:62180): pid=457196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457197 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927297.762:62181): pid=457196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.106.194.74 addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927297.763:62182): pid=457196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927297.763:62183): pid=457196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927299.007:62184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927299.157:62185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927307.015:62186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927307.019:62187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927307.023:62188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927307.026:62189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927307.030:62190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927307.033:62191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927307.260:62192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927307.355:62193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927307.421:62194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927307.464:62195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927307.497:62196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927307.537:62197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927307.685:62198): pid=457395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927307.923:62199): pid=457394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=457395 suid=74 rport=55820 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927307.923:62200): pid=457394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=457395 suid=74 rport=55820 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927312.649:62201): pid=457394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=457395 suid=74 rport=55820 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927312.649:62202): pid=457394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457395 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927312.650:62203): pid=457394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.225.21 addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927312.651:62204): pid=457394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927312.651:62205): pid=457394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927316.778:62206): pid=457431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927316.788:62207): pid=457430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=457431 suid=74 rport=56578 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927316.788:62208): pid=457430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=457431 suid=74 rport=56578 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927316.944:62209): pid=457430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=457431 suid=74 rport=56578 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927316.944:62210): pid=457430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457431 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927316.945:62211): pid=457430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=192.227.128.3 addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927316.945:62212): pid=457430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457430 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927316.946:62213): pid=457430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927319.011:62214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927319.164:62215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927330.011:62216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927330.126:62217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927338.012:62218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927338.017:62219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927338.020:62220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927338.025:62221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927338.029:62222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927338.032:62223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927338.240:62224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927338.346:62225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927338.371:62226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927338.398:62227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927338.428:62228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927338.540:62229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927339.039:62230): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927339.040:62231): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927339.102:62232): pid=457656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927339.102:62233): pid=457656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927339.104:62234): pid=457656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927339.110:62235): pid=457656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927339.112:62236): pid=457656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927339.112:62237): pid=457656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927339.116:62238): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927339.116:62239): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927339.134:62240): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927339.134:62241): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927339.188:62242): pid=457671 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927339.188:62243): pid=457671 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927339.189:62244): pid=457671 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927339.192:62245): pid=457671 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927339.805:62246): pid=457671 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927339.806:62247): pid=457671 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927339.874:62248): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927339.874:62249): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927340.684:62250): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927340.684:62251): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927340.740:62252): pid=457717 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927340.740:62253): pid=457717 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927340.741:62254): pid=457717 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927340.745:62255): pid=457717 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927340.748:62256): pid=457717 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927340.748:62257): pid=457717 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927340.752:62258): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927340.752:62259): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927350.015:62260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927350.168:62261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927353.296:62262): pid=457758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927353.397:62263): pid=457757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=457758 suid=74 rport=57240 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927353.398:62264): pid=457757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=457758 suid=74 rport=57240 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927354.012:62265): pid=457757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=457758 suid=74 rport=57240 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927354.013:62266): pid=457757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457758 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927354.013:62267): pid=457757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.185.99.40 addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927354.014:62268): pid=457757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=457757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927354.014:62269): pid=457757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.185.99.40 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927361.010:62270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927361.142:62271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927369.013:62272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927369.017:62273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927369.021:62274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927369.025:62275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927369.029:62276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927369.033:62277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927369.373:62278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927369.389:62279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927369.451:62280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927369.512:62281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927369.529:62282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927369.564:62283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927381.011:62284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927381.174:62285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927386.279:62286): pid=458037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927386.280:62287): pid=458036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=458037 suid=74 rport=45742 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927386.280:62288): pid=458036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=458037 suid=74 rport=45742 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927388.784:62289): pid=458036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458037 suid=74 rport=45742 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927388.785:62290): pid=458036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458037 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927388.785:62291): pid=458036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927388.786:62292): pid=458036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927388.786:62293): pid=458036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927389.389:62294): pid=458039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927389.390:62295): pid=458038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=458039 suid=74 rport=45762 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927389.391:62296): pid=458038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=458039 suid=74 rport=45762 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927391.351:62297): pid=458038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458039 suid=74 rport=45762 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927391.351:62298): pid=458038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458039 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927391.352:62299): pid=458038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927391.354:62300): pid=458038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927391.354:62301): pid=458038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927391.367:62302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927391.484:62303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927391.821:62304): pid=458060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927391.823:62305): pid=458059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=458060 suid=74 rport=45730 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927391.823:62306): pid=458059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=458060 suid=74 rport=45730 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927392.415:62307): pid=458035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764927393.409:62308): pid=458059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458060 suid=74 rport=45730 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927393.409:62309): pid=458059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458060 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927393.409:62310): pid=458059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927393.410:62311): pid=458059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927393.410:62312): pid=458059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927393.846:62313): pid=458062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927393.847:62314): pid=458061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=458062 suid=74 rport=45742 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927393.847:62315): pid=458061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=458062 suid=74 rport=45742 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927396.562:62316): pid=458061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458062 suid=74 rport=45742 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927396.562:62317): pid=458061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458062 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927396.563:62318): pid=458061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927396.563:62319): pid=458061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927396.563:62320): pid=458061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927397.181:62321): pid=458064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927397.182:62322): pid=458063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=458064 suid=74 rport=45766 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927397.182:62323): pid=458063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=458064 suid=74 rport=45766 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927398.083:62324): pid=458066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927398.316:62325): pid=458065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=458066 suid=74 rport=50422 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927398.316:62326): pid=458065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=458066 suid=74 rport=50422 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927399.272:62327): pid=458063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458064 suid=74 rport=45766 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927399.273:62328): pid=458063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458064 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927399.274:62329): pid=458063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927399.274:62330): pid=458063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927399.274:62331): pid=458063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927399.588:62332): pid=458065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458066 suid=74 rport=50422 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927399.589:62333): pid=458065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458066 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927399.590:62334): pid=458065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.106.194.74 addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927399.590:62335): pid=458065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927399.590:62336): pid=458065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927399.617:62337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927399.621:62338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927399.625:62339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927399.629:62340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927399.634:62341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927399.639:62342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927399.855:62343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927400.001:62344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927400.024:62345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927400.032:62346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927400.057:62347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927400.180:62348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927401.154:62349): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927401.154:62350): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927401.222:62351): pid=458246 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927401.222:62352): pid=458246 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927401.224:62353): pid=458246 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927401.228:62354): pid=458246 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927401.231:62355): pid=458246 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927401.231:62356): pid=458246 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927401.235:62357): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927401.236:62358): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927401.253:62359): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927401.253:62360): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927401.312:62361): pid=458261 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927401.312:62362): pid=458261 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927401.313:62363): pid=458261 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927401.316:62364): pid=458261 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927401.978:62365): pid=458261 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927401.978:62366): pid=458261 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927402.180:62367): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927402.180:62368): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927402.259:62369): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927402.259:62370): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927402.300:62371): pid=458307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927402.301:62372): pid=458307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927402.301:62373): pid=458307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927402.304:62374): pid=458307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927402.306:62375): pid=458307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927402.306:62376): pid=458307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927402.310:62377): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927402.310:62378): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927412.015:62379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927412.212:62380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927415.443:62381): pid=458349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927415.522:62382): pid=458348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=458349 suid=74 rport=32902 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927415.523:62383): pid=458348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=458349 suid=74 rport=32902 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927415.862:62384): pid=458348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458349 suid=74 rport=32902 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927415.863:62385): pid=458348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458349 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927415.863:62386): pid=458348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927415.864:62387): pid=458348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927415.864:62388): pid=458348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927422.011:62389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927422.151:62390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927430.006:62391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927430.011:62392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927430.117:62393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927430.122:62394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927430.126:62395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927430.227:62396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927430.364:62397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927430.383:62398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927430.456:62399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927430.498:62400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927430.509:62401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927430.554:62402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927432.232:62403): pid=458548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458548 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927432.242:62404): pid=458547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=458548 suid=74 rport=50874 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927432.242:62405): pid=458547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=458548 suid=74 rport=50874 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927432.412:62406): pid=458547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458548 suid=74 rport=50874 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927432.412:62407): pid=458547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458548 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927432.413:62408): pid=458547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=192.227.128.3 addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927432.413:62409): pid=458547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927432.413:62410): pid=458547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927441.952:62411): pid=458546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458546 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764927443.012:62412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927443.230:62413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927446.784:62414): pid=458611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458611 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927448.096:62415): pid=458610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=458611 suid=74 rport=38458 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927448.096:62416): pid=458610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=458611 suid=74 rport=38458 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764927453.007:62417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927453.156:62418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927453.597:62419): pid=458639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927453.850:62420): pid=458638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=458639 suid=74 rport=56776 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927453.851:62421): pid=458638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=458639 suid=74 rport=56776 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927456.514:62422): pid=458638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458639 suid=74 rport=56776 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927456.514:62423): pid=458638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458639 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927456.515:62424): pid=458638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.225.21 addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927456.516:62425): pid=458638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927456.516:62426): pid=458638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927459.789:62427): pid=458610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458611 suid=74 rport=38458 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927459.789:62428): pid=458610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458611 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927459.790:62429): pid=458610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.163.234 addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927459.790:62430): pid=458610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458610 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927459.790:62431): pid=458610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927461.012:62432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927461.016:62433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927461.020:62434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927461.023:62435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927461.027:62436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927461.030:62437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927461.342:62438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927461.365:62439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927461.381:62440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927461.395:62441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927461.474:62442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927461.686:62443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927462.702:62444): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927462.702:62445): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927462.767:62446): pid=458822 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927462.767:62447): pid=458822 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927462.769:62448): pid=458822 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927462.774:62449): pid=458822 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927462.777:62450): pid=458822 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927462.777:62451): pid=458822 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927462.783:62452): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927462.783:62453): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927462.804:62454): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927462.804:62455): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927462.861:62456): pid=458837 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927462.861:62457): pid=458837 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927462.862:62458): pid=458837 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927462.865:62459): pid=458837 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927463.507:62460): pid=458837 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927463.508:62461): pid=458837 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927463.627:62462): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927463.628:62463): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927465.121:62464): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927465.121:62465): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927465.182:62466): pid=458884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927465.182:62467): pid=458884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927465.182:62468): pid=458884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927465.186:62469): pid=458884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927465.189:62470): pid=458884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927465.189:62471): pid=458884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927465.193:62472): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927465.194:62473): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927474.012:62474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927474.196:62475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927484.015:62476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927484.144:62477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927492.008:62478): pid=458945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764927492.017:62479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927492.021:62480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927492.024:62481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927492.028:62482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927492.032:62483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927492.036:62484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764927492.239:62485): pid=458944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=458945 suid=74 rport=51442 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927492.240:62486): pid=458944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=458945 suid=74 rport=51442 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1764927492.296:62487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927492.391:62488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927492.416:62489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927492.452:62490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927492.472:62491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927492.571:62492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927493.493:62493): pid=458944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458945 suid=74 rport=51442 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927493.493:62494): pid=458944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458945 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927493.494:62495): pid=458944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.106.194.74 addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927493.494:62496): pid=458944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=458944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927493.494:62497): pid=458944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.106.194.74 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927505.007:62498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927505.195:62499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927511.767:62500): pid=459178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927511.768:62501): pid=459177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=459178 suid=74 rport=50692 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927511.768:62502): pid=459177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=459178 suid=74 rport=50692 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927513.334:62503): pid=459177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=459178 suid=74 rport=50692 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927513.334:62504): pid=459177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459178 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927513.335:62505): pid=459177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927513.335:62506): pid=459177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927513.335:62507): pid=459177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927513.739:62508): pid=459180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927513.740:62509): pid=459179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=459180 suid=74 rport=50712 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927513.740:62510): pid=459179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=459180 suid=74 rport=50712 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764927514.976:62511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927515.126:62512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927515.417:62513): pid=459179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=459180 suid=74 rport=50712 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927515.417:62514): pid=459179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459180 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927515.418:62515): pid=459179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927515.418:62516): pid=459179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927515.418:62517): pid=459179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927515.934:62518): pid=459201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927515.935:62519): pid=459200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=459201 suid=74 rport=54842 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927515.935:62520): pid=459200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=459201 suid=74 rport=54842 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927517.690:62521): pid=459200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=459201 suid=74 rport=54842 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927517.690:62522): pid=459200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459201 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927517.691:62523): pid=459200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927517.692:62524): pid=459200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927517.692:62525): pid=459200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927518.104:62526): pid=459203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927518.105:62527): pid=459202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=459203 suid=74 rport=54854 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927518.105:62528): pid=459202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=459203 suid=74 rport=54854 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927520.422:62529): pid=459202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=459203 suid=74 rport=54854 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927520.423:62530): pid=459202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459203 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927520.423:62531): pid=459202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927520.424:62532): pid=459202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927520.424:62533): pid=459202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927520.937:62534): pid=459205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927520.938:62535): pid=459204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=459205 suid=74 rport=54872 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927520.938:62536): pid=459204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=459205 suid=74 rport=54872 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764927522.496:62537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927522.500:62538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927522.504:62539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927522.507:62540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927522.510:62541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927522.607:62542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927522.817:62543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927522.836:62544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927522.936:62545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927522.959:62546): pid=459204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=459205 suid=74 rport=54872 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927522.960:62547): pid=459204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459205 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1764927522.960:62548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ERR msg=audit(1764927522.961:62549): pid=459204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927522.962:62550): pid=459204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927522.962:62551): pid=459204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927522.964:62552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927523.009:62553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927525.612:62554): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927525.612:62555): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927525.677:62556): pid=459381 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927525.677:62557): pid=459381 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927525.679:62558): pid=459381 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927525.684:62559): pid=459381 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927525.686:62560): pid=459381 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927525.687:62561): pid=459381 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927525.695:62562): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927525.695:62563): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927525.708:62564): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927525.708:62565): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927525.770:62566): pid=459396 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927525.770:62567): pid=459396 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927525.771:62568): pid=459396 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927525.774:62569): pid=459396 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927526.439:62570): pid=459396 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927526.440:62571): pid=459396 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927526.517:62572): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927526.517:62573): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927528.564:62574): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927528.565:62575): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927528.620:62576): pid=459443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927528.621:62577): pid=459443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927528.621:62578): pid=459443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927528.624:62579): pid=459443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927528.626:62580): pid=459443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927528.627:62581): pid=459443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927528.629:62582): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927528.629:62583): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927536.012:62584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927536.186:62585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927537.144:62586): pid=459485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927537.224:62587): pid=459484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=459485 suid=74 rport=34244 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927537.224:62588): pid=459484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=459485 suid=74 rport=34244 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927537.561:62589): pid=459484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=459485 suid=74 rport=34244 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927537.561:62590): pid=459484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459485 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927537.561:62591): pid=459484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927537.562:62592): pid=459484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927537.562:62593): pid=459484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927546.011:62594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927546.133:62595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927549.357:62596): pid=459505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927549.368:62597): pid=459504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=459505 suid=74 rport=48536 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927549.369:62598): pid=459504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=459505 suid=74 rport=48536 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927549.528:62599): pid=459504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=459505 suid=74 rport=48536 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927549.528:62600): pid=459504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459505 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927549.528:62601): pid=459504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=192.227.128.3 addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927549.529:62602): pid=459504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=459504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927549.529:62603): pid=459504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927553.011:62604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927553.014:62605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927553.018:62606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927553.022:62607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927553.027:62608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927553.035:62609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927553.228:62610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927553.261:62611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927553.327:62612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927553.345:62613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927553.395:62614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927553.422:62615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927567.019:62616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927567.201:62617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927577.013:62618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927577.148:62619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927584.017:62620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927584.019:62621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927584.022:62622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927584.025:62623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927584.029:62624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927584.033:62625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927584.318:62626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927584.350:62627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927584.393:62628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927584.430:62629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927584.461:62630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927584.513:62631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927589.026:62632): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927589.026:62633): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927589.104:62634): pid=459926 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927589.104:62635): pid=459926 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927589.106:62636): pid=459926 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927589.111:62637): pid=459926 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927589.114:62638): pid=459926 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927589.114:62639): pid=459926 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927589.120:62640): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927589.120:62641): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927589.124:62642): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927589.124:62643): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927589.186:62644): pid=459941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927589.187:62645): pid=459941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927589.187:62646): pid=459941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927589.190:62647): pid=459941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927589.721:62648): pid=459941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927589.722:62649): pid=459941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927589.799:62650): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927589.799:62651): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927592.750:62652): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927592.750:62653): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927592.810:62654): pid=459987 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927592.811:62655): pid=459987 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927592.812:62656): pid=459987 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927592.816:62657): pid=459987 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927592.819:62658): pid=459987 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927592.819:62659): pid=459987 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927592.823:62660): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927592.823:62661): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764927597.959:62662): pid=460003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764927598.013:62663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927598.204:62664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764927601.109:62665): pid=460002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=460003 suid=74 rport=49886 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927601.109:62666): pid=460002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=460003 suid=74 rport=49886 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927603.445:62667): pid=460002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=460003 suid=74 rport=49886 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927603.445:62668): pid=460002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460003 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927603.446:62669): pid=460002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.225.21 addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927603.446:62670): pid=460002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927603.447:62671): pid=460002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927608.012:62672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927608.150:62673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927611.975:62674): pid=460050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927611.976:62675): pid=460049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=460050 suid=74 rport=46432 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927611.976:62676): pid=460049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=460050 suid=74 rport=46432 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764927615.006:62677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927615.009:62678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927615.010:62679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927615.013:62680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927615.015:62681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927615.017:62682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927615.075:62683): pid=460049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=460050 suid=74 rport=46432 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927615.076:62684): pid=460049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460050 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927615.076:62685): pid=460049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.163.234 addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927615.077:62686): pid=460049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927615.077:62687): pid=460049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927615.276:62688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927615.300:62689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927615.318:62690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927615.361:62691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927615.365:62692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927615.455:62693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927629.013:62694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927629.190:62695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927639.006:62696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927639.126:62697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927646.014:62698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927646.018:62699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927646.022:62700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927646.026:62701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927646.031:62702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927646.036:62703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927646.257:62704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927646.296:62705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927646.330:62706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927646.380:62707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927646.418:62708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927646.445:62709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927653.258:62710): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927653.258:62711): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927653.320:62712): pid=460483 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927653.321:62713): pid=460483 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927653.323:62714): pid=460483 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927653.327:62715): pid=460483 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927653.330:62716): pid=460483 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927653.330:62717): pid=460483 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927653.333:62718): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927653.333:62719): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927653.336:62720): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927653.336:62721): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927653.391:62722): pid=460498 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927653.392:62723): pid=460498 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927653.392:62724): pid=460498 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927653.395:62725): pid=460498 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927654.003:62726): pid=460498 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927654.003:62727): pid=460498 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927654.051:62728): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927654.051:62729): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927655.496:62730): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927655.496:62731): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927655.553:62732): pid=460567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927655.553:62733): pid=460567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927655.554:62734): pid=460567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927655.556:62735): pid=460567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927655.559:62736): pid=460567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927655.559:62737): pid=460567 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927655.562:62738): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927655.563:62739): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927660.010:62740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927660.162:62741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927664.015:62742): pid=460608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927664.093:62743): pid=460607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=460608 suid=74 rport=54366 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927664.094:62744): pid=460607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=460608 suid=74 rport=54366 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927664.434:62745): pid=460607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=460608 suid=74 rport=54366 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927664.435:62746): pid=460607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460608 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927664.435:62747): pid=460607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927664.436:62748): pid=460607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460607 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927664.436:62749): pid=460607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927666.280:62750): pid=460610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460610 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927666.290:62751): pid=460609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=460610 suid=74 rport=35464 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927666.290:62752): pid=460609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=460610 suid=74 rport=35464 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927666.449:62753): pid=460609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=460610 suid=74 rport=35464 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927666.449:62754): pid=460609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460610 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927666.450:62755): pid=460609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=192.227.128.3 addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927666.450:62756): pid=460609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=460609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927666.450:62757): pid=460609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927670.011:62758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927670.114:62759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927677.019:62760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927677.022:62761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927677.026:62762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927677.030:62763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927677.033:62764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927677.037:62765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927677.237:62766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927677.378:62767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927677.379:62768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927677.401:62769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927677.444:62770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927677.471:62771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927691.010:62772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927691.204:62773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927701.016:62774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927701.130:62775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927708.009:62776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927708.013:62777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927708.016:62778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927708.018:62779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927708.020:62780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927708.022:62781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927708.233:62782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927708.337:62783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927708.366:62784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927708.388:62785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927708.481:62786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927708.536:62787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927715.930:62788): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927715.930:62789): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927716.001:62790): pid=461058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927716.001:62791): pid=461058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927716.003:62792): pid=461058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927716.007:62793): pid=461058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927716.009:62794): pid=461058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927716.009:62795): pid=461058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927716.015:62796): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927716.015:62797): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927716.025:62798): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927716.025:62799): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927716.064:62800): pid=461073 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927716.064:62801): pid=461073 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927716.065:62802): pid=461073 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927716.066:62803): pid=461073 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927716.604:62804): pid=461073 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927716.605:62805): pid=461073 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927716.700:62806): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927716.701:62807): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927718.983:62808): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927718.983:62809): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927719.044:62810): pid=461121 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927719.045:62811): pid=461121 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927719.046:62812): pid=461121 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927719.051:62813): pid=461121 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927719.055:62814): pid=461121 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927719.056:62815): pid=461121 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927719.061:62816): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927719.061:62817): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927722.018:62818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927722.192:62819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927724.610:62820): pid=461161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461161 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927724.877:62821): pid=461160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=461161 suid=74 rport=56330 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927724.877:62822): pid=461160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=461161 suid=74 rport=56330 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927727.487:62823): pid=461160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461161 suid=74 rport=56330 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927727.487:62824): pid=461160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461161 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927727.488:62825): pid=461160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927727.488:62826): pid=461160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461160 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927727.488:62827): pid=461160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927732.010:62828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927732.113:62829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927739.012:62830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927739.014:62831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927739.017:62832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927739.019:62833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927739.022:62834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927739.024:62835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927739.178:62836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927739.219:62837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927739.291:62838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927739.311:62839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927739.446:62840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927739.537:62841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927753.009:62842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927753.280:62843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927763.011:62844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927763.161:62845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927770.015:62846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927770.018:62847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927770.022:62848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927770.026:62849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927770.029:62850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927770.033:62851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927770.373:62852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927770.391:62853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927770.425:62854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927770.425:62855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927770.445:62856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927770.462:62857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927777.059:62858): pid=461606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927777.060:62859): pid=461605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=461606 suid=74 rport=60352 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927777.060:62860): pid=461605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=461606 suid=74 rport=60352 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764927779.457:62861): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927779.457:62862): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927779.510:62863): pid=461607 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927779.510:62864): pid=461607 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927779.512:62865): pid=461607 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927779.517:62866): pid=461607 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927779.520:62867): pid=461607 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927779.520:62868): pid=461607 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927779.524:62869): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927779.524:62870): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927779.533:62871): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927779.533:62872): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927779.590:62873): pid=461622 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927779.590:62874): pid=461622 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927779.591:62875): pid=461622 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927779.593:62876): pid=461622 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764927779.828:62877): pid=461605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461606 suid=74 rport=60352 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927779.829:62878): pid=461605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461606 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927779.829:62879): pid=461605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927779.829:62880): pid=461605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1764927780.159:62881): pid=461622 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927780.159:62882): pid=461622 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927780.223:62883): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927780.223:62884): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927783.700:62885): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927783.700:62886): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927783.760:62887): pid=461669 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927783.761:62888): pid=461669 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927783.761:62889): pid=461669 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_START msg=audit(1764927783.778:62890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764927783.781:62891): pid=461669 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927783.786:62892): pid=461669 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927783.786:62893): pid=461669 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927783.790:62894): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927783.790:62895): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_STOP msg=audit(1764927783.942:62896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927786.712:62897): pid=461711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461711 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927786.724:62898): pid=461710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=461711 suid=74 rport=34202 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927786.724:62899): pid=461710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=461711 suid=74 rport=34202 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927786.883:62900): pid=461710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461711 suid=74 rport=34202 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927786.884:62901): pid=461710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461711 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927786.885:62902): pid=461710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=192.227.128.3 addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927786.885:62903): pid=461710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927786.885:62904): pid=461710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927793.416:62905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927793.602:62906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927795.663:62907): pid=461763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927795.743:62908): pid=461762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=461763 suid=74 rport=46926 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927795.743:62909): pid=461762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=461763 suid=74 rport=46926 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927796.086:62910): pid=461762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461763 suid=74 rport=46926 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927796.087:62911): pid=461762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461763 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927796.087:62912): pid=461762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927796.088:62913): pid=461762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=461762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927796.088:62914): pid=461762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927801.010:62915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927801.013:62916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927801.016:62917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927801.019:62918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927801.024:62919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927801.028:62920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927801.277:62921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927801.296:62922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927801.364:62923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927801.425:62924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927801.551:62925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927801.579:62926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927814.014:62927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927814.173:62928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927824.010:62929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927824.090:62930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927832.012:62931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927832.015:62932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927832.018:62933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927832.020:62934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927832.023:62935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927832.026:62936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927832.332:62937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927832.348:62938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927832.411:62939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927832.436:62940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927832.496:62941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927832.565:62942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927837.950:62943): pid=462162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=462162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927838.195:62944): pid=462161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=462162 suid=74 rport=25958 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927838.196:62945): pid=462161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=462162 suid=74 rport=25958 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927839.531:62946): pid=462161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=462162 suid=74 rport=25958 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927839.532:62947): pid=462161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=462162 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927839.532:62948): pid=462161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927839.533:62949): pid=462161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=462161 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927839.533:62950): pid=462161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927844.178:62951): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927844.178:62952): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927844.227:62953): pid=462163 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927844.228:62954): pid=462163 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927844.229:62955): pid=462163 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927844.245:62956): pid=462163 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_START msg=audit(1764927844.246:62957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764927844.247:62958): pid=462163 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927844.247:62959): pid=462163 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927844.250:62960): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927844.250:62961): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927844.254:62962): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927844.255:62963): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927844.293:62964): pid=462184 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927844.293:62965): pid=462184 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927844.294:62966): pid=462184 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927844.295:62967): pid=462184 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_STOP msg=audit(1764927844.369:62968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764927845.478:62969): pid=462184 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927845.478:62970): pid=462184 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927845.513:62971): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927845.514:62972): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927845.558:62973): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927845.558:62974): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927845.615:62975): pid=462372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927845.616:62976): pid=462372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927845.617:62977): pid=462372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927845.621:62978): pid=462372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927845.623:62979): pid=462372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927845.623:62980): pid=462372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927845.627:62981): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927845.627:62982): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927845.629:62983): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927845.629:62984): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927845.687:62985): pid=462387 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927845.687:62986): pid=462387 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927845.688:62987): pid=462387 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927845.690:62988): pid=462387 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927846.312:62989): pid=462387 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927846.313:62990): pid=462387 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927846.340:62991): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927846.341:62992): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927846.535:62993): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927846.535:62994): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927846.597:62995): pid=462435 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927846.598:62996): pid=462435 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927846.599:62997): pid=462435 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927846.602:62998): pid=462435 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927846.606:62999): pid=462435 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927846.607:63000): pid=462435 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927846.613:63001): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927846.613:63002): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927855.010:63003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927855.108:63004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927863.008:63005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927863.010:63006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927863.012:63007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927863.017:63008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927863.020:63009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927863.022:63010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927863.230:63011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927863.288:63012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927863.324:63013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927863.331:63014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927863.393:63015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927863.456:63016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927868.577:63017): pid=462501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=462501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764927875.018:63018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927875.192:63019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927886.006:63020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927886.155:63021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927892.113:63022): pid=462719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=462719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927892.367:63023): pid=462718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=462719 suid=74 rport=34360 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927892.367:63024): pid=462718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=462719 suid=74 rport=34360 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764927894.018:63025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927894.021:63026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927894.025:63027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927894.029:63028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927894.034:63029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927894.038:63030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927894.280:63031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927894.350:63032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927894.388:63033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927894.437:63034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927894.498:63035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927894.525:63036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927894.953:63037): pid=462718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=462719 suid=74 rport=34360 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927894.953:63038): pid=462718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=462719 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927894.954:63039): pid=462718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.225.21 addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927894.955:63040): pid=462718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=462718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927894.955:63041): pid=462718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927906.007:63042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927906.192:63043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927907.018:63044): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927907.018:63045): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927907.106:63046): pid=462920 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927907.106:63047): pid=462920 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927907.108:63048): pid=462920 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927907.115:63049): pid=462920 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927907.118:63050): pid=462920 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927907.118:63051): pid=462920 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927907.123:63052): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927907.123:63053): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927907.131:63054): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927907.131:63055): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927907.178:63056): pid=462935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927907.179:63057): pid=462935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927907.179:63058): pid=462935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927907.181:63059): pid=462935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927907.611:63060): pid=462935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927907.611:63061): pid=462935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927907.615:63062): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927907.616:63063): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927908.314:63064): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927908.314:63065): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927908.368:63066): pid=462971 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927908.369:63067): pid=462971 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927908.371:63068): pid=462971 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927908.374:63069): pid=462971 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927908.377:63070): pid=462971 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927908.377:63071): pid=462971 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927908.383:63072): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927908.383:63073): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927908.388:63074): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927908.388:63075): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927908.436:63076): pid=462986 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927908.436:63077): pid=462986 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927908.437:63078): pid=462986 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927908.439:63079): pid=462986 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927909.009:63080): pid=462986 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927909.010:63081): pid=462986 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927909.063:63082): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927909.063:63083): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927909.152:63084): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927909.153:63085): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927909.214:63086): pid=463033 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927909.214:63087): pid=463033 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927909.215:63088): pid=463033 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927909.218:63089): pid=463033 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927909.223:63090): pid=463033 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927909.223:63091): pid=463033 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927909.226:63092): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927909.227:63093): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927917.011:63094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927917.148:63095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927923.629:63096): pid=463102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463102 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927923.709:63097): pid=463101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=463102 suid=74 rport=54694 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927923.709:63098): pid=463101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=463102 suid=74 rport=54694 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927924.058:63099): pid=463101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=463102 suid=74 rport=54694 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927924.058:63100): pid=463101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463102 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927924.058:63101): pid=463101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927924.059:63102): pid=463101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927924.059:63103): pid=463101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927925.015:63104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927925.019:63105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927925.023:63106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927925.027:63107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927925.031:63108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927925.038:63109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927925.297:63110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927925.429:63111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927925.480:63112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927925.500:63113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927925.544:63114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927925.565:63115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927929.306:63116): pid=463276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927935.285:63117): pid=463275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=463276 suid=74 rport=55410 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927935.285:63118): pid=463275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=463276 suid=74 rport=55410 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927935.294:63119): pid=463275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=463276 suid=74 rport=55410 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927935.294:63120): pid=463275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463276 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927935.295:63121): pid=463275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463275 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927935.295:63122): pid=463275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927937.006:63123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927937.190:63124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927948.006:63125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927948.117:63126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927956.016:63127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927956.018:63128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927956.020:63129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927956.023:63130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927956.025:63131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927956.028:63132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927956.299:63133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927956.314:63134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927956.342:63135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927956.383:63136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927956.432:63137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927956.553:63138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927961.163:63139): pid=463516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927963.050:63140): pid=463515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=463516 suid=74 rport=43276 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927963.050:63141): pid=463515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=463516 suid=74 rport=43276 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927964.894:63142): pid=463515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=463516 suid=74 rport=43276 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927964.895:63143): pid=463515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463516 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927964.896:63144): pid=463515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927964.896:63145): pid=463515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927964.896:63146): pid=463515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927965.795:63147): pid=463519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927965.796:63148): pid=463518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=463519 suid=74 rport=51478 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927965.797:63149): pid=463518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=463519 suid=74 rport=51478 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764927968.012:63150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927968.154:63151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764927969.642:63152): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927969.642:63153): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927969.689:63154): pid=463545 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927969.690:63155): pid=463545 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927969.691:63156): pid=463545 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927969.693:63157): pid=463545 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927969.695:63158): pid=463545 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927969.695:63159): pid=463545 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927969.699:63160): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927969.699:63161): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927969.699:63162): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927969.699:63163): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927969.748:63164): pid=463560 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927969.748:63165): pid=463560 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927969.749:63166): pid=463560 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927969.750:63167): pid=463560 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927970.342:63168): pid=463560 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927970.342:63169): pid=463560 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927970.382:63170): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927970.382:63171): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764927971.678:63172): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764927971.678:63173): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764927971.728:63174): pid=463606 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764927971.728:63175): pid=463606 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764927971.729:63176): pid=463606 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764927971.732:63177): pid=463606 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927971.735:63178): pid=463606 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764927971.736:63179): pid=463606 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764927971.739:63180): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764927971.740:63181): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764927979.017:63182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927979.160:63183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927987.013:63184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927987.016:63185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927987.019:63186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927987.022:63187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927987.025:63188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927987.028:63189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927987.310:63190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927987.355:63191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927987.414:63192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927987.436:63193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927987.446:63194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927987.527:63195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927987.679:63196): pid=463849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764927987.925:63197): pid=463848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=463849 suid=74 rport=11388 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764927987.925:63198): pid=463848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=463849 suid=74 rport=11388 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927989.267:63199): pid=463848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=463849 suid=74 rport=11388 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764927989.268:63200): pid=463848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463849 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764927989.269:63201): pid=463848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764927989.269:63202): pid=463848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=463848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764927989.269:63203): pid=463848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764927999.010:63204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764927999.207:63205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928010.010:63206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928010.145:63207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928018.015:63208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928018.019:63209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928018.022:63210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928018.026:63211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928018.030:63212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928018.034:63213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928018.303:63214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928018.416:63215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928018.471:63216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928018.520:63217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928018.529:63218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928018.544:63219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928030.010:63220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928030.189:63221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928032.160:63222): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928032.160:63223): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928032.228:63224): pid=464094 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928032.229:63225): pid=464094 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928032.230:63226): pid=464094 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928032.237:63227): pid=464094 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928032.239:63228): pid=464094 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928032.239:63229): pid=464094 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928032.245:63230): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928032.245:63231): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928032.264:63232): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928032.264:63233): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928032.321:63234): pid=464109 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928032.322:63235): pid=464109 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928032.322:63236): pid=464109 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928032.325:63237): pid=464109 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928032.851:63238): pid=464109 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928032.852:63239): pid=464109 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928032.883:63240): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928032.884:63241): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928033.177:63242): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928033.177:63243): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928033.223:63244): pid=464157 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928033.223:63245): pid=464157 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928033.223:63246): pid=464157 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928033.226:63247): pid=464157 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928033.228:63248): pid=464157 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928033.228:63249): pid=464157 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928033.232:63250): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928033.232:63251): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928034.227:63252): pid=464207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928035.989:63253): pid=464206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=464207 suid=74 rport=43350 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928035.989:63254): pid=464206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=464207 suid=74 rport=43350 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928037.892:63255): pid=464206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=464207 suid=74 rport=43350 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928037.893:63256): pid=464206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464207 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928037.893:63257): pid=464206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.225.21 addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928037.894:63258): pid=464206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928037.894:63259): pid=464206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928041.018:63260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928041.158:63261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928045.858:63262): pid=464229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928047.158:63263): pid=464228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=464229 suid=74 rport=38882 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928047.158:63264): pid=464228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=464229 suid=74 rport=38882 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928049.016:63265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928049.021:63266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928049.024:63267): pid=464228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=464229 suid=74 rport=38882 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928049.025:63268): pid=464228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464229 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928049.025:63269): pid=464228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928049.025:63270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928049.026:63271): pid=464228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464228 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928049.026:63272): pid=464228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928049.031:63273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928049.036:63274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928049.040:63275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928049.300:63276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928049.389:63277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928049.454:63278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928049.497:63279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928049.525:63280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928049.589:63281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928055.314:63282): pid=464409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928055.392:63283): pid=464408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=464409 suid=74 rport=44548 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928055.392:63284): pid=464408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=464409 suid=74 rport=44548 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928055.733:63285): pid=464408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=464409 suid=74 rport=44548 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928055.733:63286): pid=464408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464409 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928055.734:63287): pid=464408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928055.734:63288): pid=464408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464408 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928055.735:63289): pid=464408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928061.011:63290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928061.198:63291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928072.018:63292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928072.170:63293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928073.087:63294): pid=464457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928073.384:63295): pid=464456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=464457 suid=74 rport=65268 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928073.384:63296): pid=464456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=464457 suid=74 rport=65268 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928074.957:63297): pid=464456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=464457 suid=74 rport=65268 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928074.958:63298): pid=464456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464457 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928074.959:63299): pid=464456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928074.959:63300): pid=464456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928074.959:63301): pid=464456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928080.009:63302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928080.012:63303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928080.015:63304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928080.018:63305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928080.020:63306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928080.023:63307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928080.283:63308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928080.299:63309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928080.354:63310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928080.378:63311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928080.423:63312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928080.511:63313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928092.018:63314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928092.231:63315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928093.671:63316): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928093.671:63317): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928093.739:63318): pid=464661 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928093.739:63319): pid=464661 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928093.741:63320): pid=464661 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928093.748:63321): pid=464661 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928093.751:63322): pid=464661 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928093.751:63323): pid=464661 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928093.758:63324): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928093.758:63325): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928093.770:63326): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928093.770:63327): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928093.816:63328): pid=464676 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928093.816:63329): pid=464676 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928093.817:63330): pid=464676 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928093.819:63331): pid=464676 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928094.414:63332): pid=464676 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928094.414:63333): pid=464676 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928094.467:63334): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928094.467:63335): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928096.597:63336): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928096.597:63337): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928096.663:63338): pid=464759 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928096.663:63339): pid=464759 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928096.664:63340): pid=464759 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928096.667:63341): pid=464759 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928096.671:63342): pid=464759 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928096.671:63343): pid=464759 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928096.675:63344): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928096.675:63345): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764928103.010:63346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928103.177:63347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928107.834:63348): pid=464791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928107.836:63349): pid=464758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=464791 suid=74 rport=43450 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=106.13.169.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928107.837:63350): pid=464758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=464791 suid=74 rport=43450 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=106.13.169.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928107.837:63351): pid=464758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464791 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928107.838:63352): pid=464758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928107.838:63353): pid=464758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=106.13.169.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928111.020:63354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928111.023:63355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928111.026:63356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928111.028:63357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928111.031:63358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928111.033:63359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928111.274:63360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928111.291:63361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928111.309:63362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928111.382:63363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928111.427:63364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928111.672:63365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928123.011:63366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928123.172:63367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928131.905:63368): pid=464994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928132.170:63369): pid=464993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=464994 suid=74 rport=52306 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928132.170:63370): pid=464993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=464994 suid=74 rport=52306 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928134.012:63371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928134.202:63372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928134.783:63373): pid=464993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=464994 suid=74 rport=52306 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928134.784:63374): pid=464993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464994 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928134.784:63375): pid=464993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928134.785:63376): pid=464993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=464993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928134.785:63377): pid=464993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928142.015:63378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928142.019:63379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928142.023:63380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928142.027:63381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928142.031:63382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928142.035:63383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928142.223:63384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928142.358:63385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928142.414:63386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928142.454:63387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928142.514:63388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928142.582:63389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928147.919:63390): pid=465190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928147.921:63391): pid=465189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=465190 suid=74 rport=59186 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928147.921:63392): pid=465189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=465190 suid=74 rport=59186 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928154.011:63393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928154.220:63394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928157.067:63395): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928157.067:63396): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928157.132:63397): pid=465252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928157.132:63398): pid=465252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928157.134:63399): pid=465252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928157.140:63400): pid=465252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928157.143:63401): pid=465252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928157.143:63402): pid=465252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928157.148:63403): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928157.148:63404): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928157.152:63405): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928157.152:63406): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928157.193:63407): pid=465267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928157.193:63408): pid=465267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928157.193:63409): pid=465267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928157.195:63410): pid=465267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928157.845:63411): pid=465267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928157.845:63412): pid=465267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928157.959:63413): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928157.959:63414): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928158.087:63415): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928158.087:63416): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928158.144:63417): pid=465315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928158.144:63418): pid=465315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928158.145:63419): pid=465315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928158.148:63420): pid=465315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928158.151:63421): pid=465315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928158.151:63422): pid=465315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928158.155:63423): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928158.155:63424): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928159.910:63425): pid=465331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928160.160:63426): pid=465330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=465331 suid=74 rport=37902 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928160.160:63427): pid=465330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=465331 suid=74 rport=37902 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928161.514:63428): pid=465330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=465331 suid=74 rport=37902 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928161.514:63429): pid=465330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465331 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928161.515:63430): pid=465330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928161.516:63431): pid=465330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928161.516:63432): pid=465330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928165.012:63433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928165.172:63434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928173.015:63435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928173.019:63436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928173.023:63437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928173.027:63438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928173.031:63439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928173.037:63440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928173.227:63441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928173.425:63442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928173.481:63443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928173.526:63444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928173.535:63445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928173.573:63446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928181.087:63447): pid=465521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928182.528:63448): pid=29346 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29369 suid=1002 rport=50992 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928182.528:63449): pid=29346 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29369 suid=1002 rport=50992 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928182.534:63450): pid=29346 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29369 suid=1002 rport=50992 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928182.538:63451): pid=29346 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29369 suid=1002 rport=50992 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928182.575:63452): pid=29363 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29370 suid=1002 rport=51006 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928182.576:63453): pid=29363 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29370 suid=1002 rport=51006 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928182.582:63454): pid=29363 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29370 suid=1002 rport=51006 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928182.586:63455): pid=29363 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29370 suid=1002 rport=51006 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928184.447:63456): pid=465520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=465521 suid=74 rport=56616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928184.448:63457): pid=465520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=465521 suid=74 rport=56616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928185.009:63458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928185.185:63459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764928186.175:63460): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29558 suid=1002 rport=51088 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928186.175:63461): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29558 suid=1002 rport=51088 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928186.183:63462): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29558 suid=1002 rport=51088 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928186.185:63463): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29558 suid=1002 rport=51088 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928187.187:63464): pid=465551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928187.261:63465): pid=465550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=465551 suid=74 rport=35426 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928187.262:63466): pid=465550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=465551 suid=74 rport=35426 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928187.599:63467): pid=465550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=465551 suid=74 rport=35426 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928187.599:63468): pid=465550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465551 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928187.600:63469): pid=465550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928187.600:63470): pid=465550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928187.600:63471): pid=465550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928187.814:63472): pid=465520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=465521 suid=74 rport=56616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928187.815:63473): pid=465520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465521 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928187.815:63474): pid=465520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928187.815:63475): pid=465520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764928189.499:63476): pid=29405 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29408 suid=1002 rport=51026 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.499:63477): pid=29405 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29408 suid=1002 rport=51026 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.505:63478): pid=29405 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29408 suid=1002 rport=51026 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.506:63479): pid=29443 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29446 suid=1002 rport=51044 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.506:63480): pid=29443 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29446 suid=1002 rport=51044 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.511:63481): pid=29481 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29484 suid=1002 rport=51070 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.511:63482): pid=29481 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29484 suid=1002 rport=51070 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.515:63483): pid=29386 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29389 suid=1002 rport=51018 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.516:63484): pid=29386 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29389 suid=1002 rport=51018 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.520:63485): pid=29462 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29465 suid=1002 rport=51060 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.520:63486): pid=29462 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29465 suid=1002 rport=51060 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.525:63487): pid=29424 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29427 suid=1002 rport=51030 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.525:63488): pid=29424 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29427 suid=1002 rport=51030 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.532:63489): pid=29405 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29408 suid=1002 rport=51026 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.539:63490): pid=29443 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29446 suid=1002 rport=51044 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.544:63491): pid=29481 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29484 suid=1002 rport=51070 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.547:63492): pid=29519 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29522 suid=1002 rport=51084 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.548:63493): pid=29519 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29522 suid=1002 rport=51084 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.558:63494): pid=29443 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29446 suid=1002 rport=51044 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.566:63495): pid=29386 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29389 suid=1002 rport=51018 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.570:63496): pid=29462 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29465 suid=1002 rport=51060 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.573:63497): pid=29424 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29427 suid=1002 rport=51030 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.585:63498): pid=29386 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29389 suid=1002 rport=51018 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.590:63499): pid=29481 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29484 suid=1002 rport=51070 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.596:63500): pid=29519 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29522 suid=1002 rport=51084 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.603:63501): pid=29500 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29503 suid=1002 rport=51072 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.603:63502): pid=29500 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29503 suid=1002 rport=51072 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.605:63503): pid=29536 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29539 suid=1002 rport=51086 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928189.606:63504): pid=29536 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=ecdh-sha2-nistp521 spid=29539 suid=1002 rport=51086 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.610:63505): pid=29462 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29465 suid=1002 rport=51060 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.613:63506): pid=29424 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29427 suid=1002 rport=51030 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.626:63507): pid=29519 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29522 suid=1002 rport=51084 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.633:63508): pid=29500 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29503 suid=1002 rport=51072 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.633:63509): pid=29536 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29539 suid=1002 rport=51086 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.636:63510): pid=29500 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29503 suid=1002 rport=51072 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928189.638:63511): pid=29536 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29539 suid=1002 rport=51086 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928193.761:63512): pid=465553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928193.762:63513): pid=465552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=465553 suid=74 rport=58702 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928193.763:63514): pid=465552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=465553 suid=74 rport=58702 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928195.488:63515): pid=465552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=465553 suid=74 rport=58702 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928195.488:63516): pid=465552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465553 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928195.489:63517): pid=465552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928195.489:63518): pid=465552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928195.489:63519): pid=465552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928195.506:63520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928195.608:63521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928195.991:63522): pid=465574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928195.992:63523): pid=465573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=465574 suid=74 rport=58710 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928195.992:63524): pid=465573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=465574 suid=74 rport=58710 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928197.392:63525): pid=465573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=465574 suid=74 rport=58710 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928197.392:63526): pid=465573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465574 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928197.393:63527): pid=465573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928197.394:63528): pid=465573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928197.394:63529): pid=465573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928197.705:63530): pid=465576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928197.884:63531): pid=465575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=465576 suid=74 rport=58716 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928197.884:63532): pid=465575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=465576 suid=74 rport=58716 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928198.757:63533): pid=465575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=465576 suid=74 rport=58716 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928198.757:63534): pid=465575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465576 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928198.758:63535): pid=465575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928198.759:63536): pid=465575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928198.759:63537): pid=465575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928199.142:63538): pid=465578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928199.143:63539): pid=465577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=465578 suid=74 rport=58730 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928199.143:63540): pid=465577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=465578 suid=74 rport=58730 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928201.050:63541): pid=465577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=465578 suid=74 rport=58730 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928201.051:63542): pid=465577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465578 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928201.051:63543): pid=465577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928201.052:63544): pid=465577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928201.052:63545): pid=465577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928201.594:63546): pid=465580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928201.595:63547): pid=465579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=465580 suid=74 rport=22866 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928201.595:63548): pid=465579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=465580 suid=74 rport=22866 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928203.582:63549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928203.586:63550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928203.591:63551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928203.594:63552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928203.599:63553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928203.607:63554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928203.912:63555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928203.927:63556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928203.964:63557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928203.984:63558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928204.010:63559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928204.014:63560): pid=465579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=465580 suid=74 rport=22866 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928204.014:63561): pid=465579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465580 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928204.015:63562): pid=465579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928204.016:63563): pid=465579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928204.016:63564): pid=465579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928204.041:63565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928210.225:63566): pid=465756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764928210.451:63567): pid=465758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928210.713:63568): pid=465757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=465758 suid=74 rport=49508 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928210.713:63569): pid=465757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=465758 suid=74 rport=49508 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928213.304:63570): pid=465757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=465758 suid=74 rport=49508 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928213.304:63571): pid=465757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465758 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928213.305:63572): pid=465757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928213.306:63573): pid=465757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=465757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928213.306:63574): pid=465757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928216.011:63575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928216.181:63576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928218.574:63577): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928218.574:63578): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928218.644:63579): pid=465823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928218.645:63580): pid=465823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928218.647:63581): pid=465823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928218.653:63582): pid=465823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928218.656:63583): pid=465823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928218.656:63584): pid=465823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928218.667:63585): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928218.667:63586): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928218.685:63587): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928218.685:63588): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928218.748:63589): pid=465838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928218.748:63590): pid=465838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928218.749:63591): pid=465838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928218.752:63592): pid=465838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928219.448:63593): pid=465838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928219.448:63594): pid=465838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928219.674:63595): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928219.674:63596): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928219.691:63597): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928219.691:63598): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928219.729:63599): pid=465884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928219.729:63600): pid=465884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928219.729:63601): pid=465884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928219.732:63602): pid=465884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928219.734:63603): pid=465884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928219.734:63604): pid=465884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928219.737:63605): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928219.737:63606): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928219.739:63607): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928219.739:63608): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928219.781:63609): pid=465899 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928219.781:63610): pid=465899 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928219.781:63611): pid=465899 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928219.783:63612): pid=465899 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928220.145:63613): pid=465899 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928220.145:63614): pid=465899 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928220.148:63615): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928220.148:63616): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928220.201:63617): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928220.201:63618): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928220.245:63619): pid=465935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928220.245:63620): pid=465935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928220.246:63621): pid=465935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928220.248:63622): pid=465935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928220.250:63623): pid=465935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928220.250:63624): pid=465935 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928220.253:63625): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928220.253:63626): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764928226.016:63627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928226.129:63628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928234.018:63629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928234.022:63630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928234.025:63631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928234.028:63632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928234.033:63633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928234.159:63634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928234.340:63635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928234.365:63636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928234.416:63637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928234.467:63638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928234.485:63639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928234.544:63640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928239.952:63641): pid=466143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=466143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928243.242:63642): pid=466142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=466143 suid=74 rport=37804 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928243.242:63643): pid=466142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=466143 suid=74 rport=37804 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928243.570:63644): pid=466146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=466146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928243.822:63645): pid=466145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=466146 suid=74 rport=23068 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928243.822:63646): pid=466145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=466146 suid=74 rport=23068 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928245.182:63647): pid=466145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=466146 suid=74 rport=23068 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928245.182:63648): pid=466145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=466146 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928245.182:63649): pid=466145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928245.183:63650): pid=466145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=466145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928245.183:63651): pid=466145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928247.009:63652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928247.211:63653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928250.446:63654): pid=466142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=466143 suid=74 rport=37804 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928250.447:63655): pid=466142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=466143 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928250.448:63656): pid=466142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=466142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928250.448:63657): pid=466142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928256.976:63658): pid=466195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=466195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928256.991:63659): pid=466194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=466195 suid=74 rport=38276 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928256.991:63660): pid=466194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=466195 suid=74 rport=38276 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928257.007:63661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928257.113:63662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928257.150:63663): pid=466194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=466195 suid=74 rport=38276 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928257.150:63664): pid=466194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=466195 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928257.151:63665): pid=466194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=192.227.128.3 addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928257.151:63666): pid=466194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=466194 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928257.152:63667): pid=466194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928265.019:63668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928265.023:63669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928265.027:63670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928265.030:63671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928265.034:63672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928265.039:63673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928265.279:63674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928265.344:63675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928265.346:63676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928265.408:63677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928265.416:63678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928265.509:63679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928278.010:63680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928278.175:63681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928280.657:63682): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928280.657:63683): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928280.717:63684): pid=466448 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928280.717:63685): pid=466448 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928280.719:63686): pid=466448 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928280.724:63687): pid=466448 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928280.727:63688): pid=466448 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928280.727:63689): pid=466448 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928280.732:63690): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928280.733:63691): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928280.736:63692): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928280.736:63693): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928280.790:63694): pid=466463 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928280.790:63695): pid=466463 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928280.791:63696): pid=466463 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928280.793:63697): pid=466463 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928281.468:63698): pid=466463 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928281.468:63699): pid=466463 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928281.553:63700): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928281.553:63701): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928281.615:63702): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928281.615:63703): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928281.680:63704): pid=466510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928281.680:63705): pid=466510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928281.681:63706): pid=466510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928281.685:63707): pid=466510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928281.688:63708): pid=466510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928281.689:63709): pid=466510 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928281.692:63710): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928281.692:63711): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928281.695:63712): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928281.695:63713): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928281.757:63714): pid=466525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928281.758:63715): pid=466525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F75742038393520636570682D766F6C756D65202D2D667369642037396665646462312D346266632D353537662D383362392D306435376339663636633162202D2D20696E76656E746F7279202D2D666F726D61743D6A736F6E2D707265747479202D2D66696C7465722D666F722D6261746368 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928281.758:63716): pid=466525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928281.761:63717): pid=466525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=BPF msg=audit(1764928282.576:63718): prog-id=2372 op=LOAD type=SYSCALL msg=audit(1764928282.576:63718): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff975029d0 a2=90 a3=9500000000 items=0 ppid=466597 pid=466598 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928282.576:63718): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616162643066373566656439313937616433363165393838383436623965 type=BPF msg=audit(1764928282.628:63719): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928282.990:63720): prog-id=2373 op=LOAD type=SYSCALL msg=audit(1764928282.990:63720): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe32eb1710 a2=90 a3=9500000001 items=0 ppid=466639 pid=466640 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928282.990:63720): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303132393639613163363131613033623761383864633362636139306138 type=BPF msg=audit(1764928284.074:63721): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928284.226:63722): pid=466525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928284.226:63723): pid=466525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928284.231:63724): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928284.231:63725): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928284.328:63726): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928284.328:63727): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928284.392:63728): pid=467594 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928284.392:63729): pid=467594 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928284.394:63730): pid=467594 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928284.400:63731): pid=467594 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928284.404:63732): pid=467594 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928284.404:63733): pid=467594 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928284.409:63734): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928284.409:63735): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928287.090:63736): pid=467610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467610 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928287.351:63737): pid=467609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=467610 suid=74 rport=56764 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928287.351:63738): pid=467609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=467610 suid=74 rport=56764 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928288.011:63739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928288.171:63740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928289.519:63741): pid=467609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=467610 suid=74 rport=56764 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928289.519:63742): pid=467609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467610 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928289.520:63743): pid=467609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928289.521:63744): pid=467609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928289.521:63745): pid=467609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928296.019:63746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928296.023:63747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928296.027:63748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928296.032:63749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928296.037:63750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928296.043:63751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928296.288:63752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928296.350:63753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928296.449:63754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928296.482:63755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928296.503:63756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928296.541:63757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928303.226:63758): pid=467805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928303.227:63759): pid=467804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=467805 suid=74 rport=44028 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928303.228:63760): pid=467804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=467805 suid=74 rport=44028 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1764928303.293:63761): pid=467804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1764928303.305:63762): pid=467804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928303.305:63763): pid=467804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5d:f5:28:43:c1:ce:d9:fe:fd:db:bd:89:9e:0e:5e:69:1c:b2:7e:10:3c:5c:36:4b:50:86:57:31:8b:3e:6d:e5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764928303.335:63764): pid=467804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928303.336:63765): pid=467804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=467805 suid=74 rport=44028 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1764928303.338:63766): pid=467804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764928303.339:63767): pid=467804 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=243 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1764928303.339:63767): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff9b5cbd50 a2=4 a3=3e8 items=0 ppid=410121 pid=467804 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=243 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928303.339:63767): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1764928303.341:63768): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_ACCT msg=audit(1764928303.399:63769): pid=467807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1764928303.399:63770): pid=467807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1764928303.400:63771): pid=467807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764928303.401:63772): pid=467807 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=244 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1764928303.401:63772): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd083a2f50 a2=4 a3=3e8 items=0 ppid=1 pid=467807 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=244 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928303.401:63772): proctitle="(systemd)" type=USER_START msg=audit(1764928303.403:63773): pid=467807 uid=0 auid=1000 ses=244 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1764928303.550:63774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764928303.580:63775): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764928303.581:63776): pid=467822 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1764928303.583:63777): pid=467822 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1764928303.628:63778): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764928303.628:63779): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764928303.631:63780): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467823 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764928303.702:63781): pid=467836 uid=1000 auid=1000 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764928303.703:63782): pid=467836 uid=1000 auid=1000 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6564677261756E72756C6E73757864616E6C6F716C706D727175696E616178203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764928303.703:63783): pid=467836 uid=1000 auid=1000 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764928303.709:63784): pid=467836 uid=1000 auid=1000 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764928304.617:63785): pid=467836 uid=1000 auid=1000 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764928304.617:63786): pid=467836 uid=1000 auid=1000 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764928304.622:63787): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764928304.622:63788): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_START msg=audit(1764928309.012:63789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928309.168:63790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928309.839:63791): pid=467868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928309.918:63792): pid=467867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=467868 suid=74 rport=57172 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928309.918:63793): pid=467867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=467868 suid=74 rport=57172 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928310.259:63794): pid=467867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=467868 suid=74 rport=57172 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928310.260:63795): pid=467867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467868 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928310.261:63796): pid=467867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928310.261:63797): pid=467867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928310.261:63798): pid=467867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928313.753:63799): pid=467870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928313.754:63800): pid=467869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=467870 suid=74 rport=59630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928313.755:63801): pid=467869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=467870 suid=74 rport=59630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1764928313.831:63802): pid=467869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928313.831:63803): pid=467869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5d:f5:28:43:c1:ce:d9:fe:fd:db:bd:89:9e:0e:5e:69:1c:b2:7e:10:3c:5c:36:4b:50:86:57:31:8b:3e:6d:e5 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764928313.862:63804): pid=467869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928313.863:63805): pid=467869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=467870 suid=74 rport=59630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1764928313.865:63806): pid=467869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764928313.866:63807): pid=467869 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1003 tty=(none) old-ses=4294967295 ses=245 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin" type=SYSCALL msg=audit(1764928313.866:63807): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe22c4e530 a2=4 a3=3eb items=0 ppid=410121 pid=467869 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928313.866:63807): proctitle=737368643A20747269706C656F2D61646D696E205B707269765D type=USER_ROLE_CHANGE msg=audit(1764928313.868:63808): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928313.922:63809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764928313.971:63810): pid=467873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1764928313.971:63811): pid=467873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1764928313.972:63812): pid=467873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764928313.973:63813): pid=467873 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1003 tty=(none) old-ses=4294967295 ses=246 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin" type=SYSCALL msg=audit(1764928313.973:63813): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd083a2f50 a2=4 a3=3eb items=0 ppid=1 pid=467873 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=246 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928313.973:63813): proctitle="(systemd)" type=USER_START msg=audit(1764928313.976:63814): pid=467873 uid=0 auid=1003 ses=246 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928314.145:63815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764928314.171:63816): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928314.173:63817): pid=467889 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="root" type=CRED_ACQ msg=audit(1764928314.174:63818): pid=467889 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" type=USER_LOGIN msg=audit(1764928314.217:63819): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928314.217:63820): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928314.220:63821): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467890 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928314.253:63822): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928314.253:63823): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928314.266:63824): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928314.266:63825): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928314.267:63826): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467903 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928314.308:63827): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928314.308:63828): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928314.579:63829): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928314.580:63830): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928314.581:63831): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467922 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928314.618:63832): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928314.618:63833): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928314.632:63834): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928314.632:63835): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928314.634:63836): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467937 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928314.724:63837): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928314.724:63838): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928314.742:63839): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928314.742:63840): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928314.743:63841): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467951 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928314.797:63842): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928314.797:63843): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928314.814:63844): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928314.814:63845): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928314.815:63846): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467964 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928314.851:63847): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928314.851:63848): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928314.865:63849): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928314.865:63850): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928314.868:63851): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467978 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_START msg=audit(1764928319.012:63852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928319.125:63853): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928319.125:63854): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928319.152:63855): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928319.152:63856): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928319.154:63857): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468129 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928319.176:63858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928319.203:63859): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928319.203:63860): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928319.306:63861): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928319.307:63862): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928319.308:63863): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468143 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928319.337:63864): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928319.337:63865): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928319.355:63866): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928319.355:63867): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928319.357:63868): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468156 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928319.395:63869): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928319.395:63870): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928319.598:63871): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928319.598:63872): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928319.600:63873): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468175 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928319.648:63874): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928319.648:63875): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928319.668:63876): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928319.668:63877): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928319.670:63878): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468188 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928319.703:63879): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928319.703:63880): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928319.720:63881): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928319.720:63882): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928319.722:63883): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468202 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928319.782:63884): pid=468217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928319.782:63885): pid=468217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647963776170696E6C6474666E76706979716A727A716672767167726E626269203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383331392E333430363633322D36303336392D33373133363435313131373337392F416E736962616C6C5A5F66696E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928319.784:63886): pid=468217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928319.789:63887): pid=468217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928320.008:63888): pid=468217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928320.009:63889): pid=468217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928320.014:63890): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928320.014:63891): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928320.029:63892): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928320.030:63893): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928320.031:63894): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468220 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928320.067:63895): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928320.068:63896): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928320.170:63897): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928320.170:63898): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928320.171:63899): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468234 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928320.202:63900): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928320.203:63901): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928320.215:63902): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928320.215:63903): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928320.217:63904): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468247 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928320.250:63905): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928320.251:63906): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928320.400:63907): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928320.400:63908): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928320.403:63909): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468266 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928320.450:63910): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928320.451:63911): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928320.467:63912): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928320.467:63913): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928320.468:63914): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468279 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928320.502:63915): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928320.502:63916): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928320.516:63917): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928320.516:63918): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928320.518:63919): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468293 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928320.589:63920): pid=468308 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928320.589:63921): pid=468308 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786675716C626F6B7971766B6F76696F676A686369766E686D6764767776726C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383332302E323034393130352D36303338322D33313233363239393031333439322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928320.590:63922): pid=468308 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928320.594:63923): pid=468308 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928321.365:63924): pid=468352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928321.616:63925): pid=468350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=468352 suid=74 rport=40890 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928321.616:63926): pid=468350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=468352 suid=74 rport=40890 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1764928322.454:63927): prog-id=2374 op=LOAD type=SYSCALL msg=audit(1764928322.454:63927): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff9a019b80 a2=90 a3=9500000000 items=0 ppid=468456 pid=468457 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928322.454:63927): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333433353463333864316235653030656534626135633466323062633134 type=BPF msg=audit(1764928322.517:63928): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928322.916:63929): prog-id=2375 op=LOAD type=SYSCALL msg=audit(1764928322.916:63929): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe28705890 a2=90 a3=9500000001 items=0 ppid=468497 pid=468498 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928322.916:63929): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653264373137336539313431636261313432366436333831346466656539 type=CRYPTO_KEY_USER msg=audit(1764928322.978:63930): pid=468350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=468352 suid=74 rport=40890 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928322.978:63931): pid=468350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468352 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928322.979:63932): pid=468350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928322.980:63933): pid=468350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928322.980:63934): pid=468350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1764928323.427:63935): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928323.569:63936): pid=468308 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928323.569:63937): pid=468308 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928323.574:63938): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928323.574:63939): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928323.589:63940): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928323.589:63941): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928323.592:63942): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468536 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928323.618:63943): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928323.618:63944): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928323.721:63945): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928323.721:63946): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928323.723:63947): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468550 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928323.749:63948): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928323.749:63949): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928323.762:63950): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928323.762:63951): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928323.763:63952): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468563 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928323.795:63953): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928323.795:63954): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928323.843:63955): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928323.843:63956): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928323.844:63957): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468582 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928323.891:63958): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928323.892:63959): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928323.904:63960): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928323.904:63961): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928323.905:63962): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468595 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928323.931:63963): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928323.933:63964): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928323.945:63965): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928323.945:63966): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928323.947:63967): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468609 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928323.999:63968): pid=468624 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928323.999:63969): pid=468624 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7A687672676370686E78676C70726C657478696C746D717763686E79687170203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383332332E373531393033352D36303339352D3131353733323837393434383439382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928324.000:63970): pid=468624 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928324.005:63971): pid=468624 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928324.200:63972): pid=468629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928324.478:63973): pid=468628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=468629 suid=74 rport=56600 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928324.479:63974): pid=468628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=468629 suid=74 rport=56600 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928325.545:63975): pid=468743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928325.798:63976): pid=468740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=468743 suid=74 rport=33508 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928325.798:63977): pid=468740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=468743 suid=74 rport=33508 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1764928325.901:63978): prog-id=2376 op=LOAD type=SYSCALL msg=audit(1764928325.901:63978): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff8bdbb360 a2=90 a3=9500000000 items=0 ppid=468774 pid=468775 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928325.901:63978): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F396263633737623134623633313438343933633266333064333163326438 type=BPF msg=audit(1764928325.958:63979): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1764928326.165:63980): pid=468628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=468629 suid=74 rport=56600 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928326.166:63981): pid=468628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468629 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928326.167:63982): pid=468628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.112.96.35 addr=114.112.96.35 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928326.168:63983): pid=468628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928326.168:63984): pid=468628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928326.327:63985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928326.343:63986): prog-id=2377 op=LOAD type=SYSCALL msg=audit(1764928326.343:63986): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffefe9f4250 a2=90 a3=9500000001 items=0 ppid=468815 pid=468816 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928326.343:63986): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376336363637396235386234643065643863303830656235346137633036 type=SERVICE_START msg=audit(1764928326.576:63987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928326.580:63988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928326.584:63989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928326.590:63990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928326.593:63991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928326.595:63992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928326.837:63993): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1764928326.914:63994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928326.953:63995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928326.973:63996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928327.060:63997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928327.070:63998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928327.174:63999): pid=468624 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928327.174:64000): pid=468624 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928327.182:64001): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928327.182:64002): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928327.196:64003): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928327.196:64004): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928327.199:64005): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469030 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928327.238:64006): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928327.238:64007): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928327.397:64008): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928327.397:64009): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928327.399:64010): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469044 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928327.428:64011): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928327.428:64012): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928327.442:64013): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928327.442:64014): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928327.444:64015): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469057 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928327.480:64016): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928327.481:64017): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928327.501:64018): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928327.501:64019): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928327.503:64020): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469076 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928327.546:64021): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928327.546:64022): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928327.560:64023): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928327.560:64024): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928327.562:64025): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469089 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928327.592:64026): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928327.592:64027): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928327.606:64028): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928327.606:64029): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928327.609:64030): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469103 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928327.677:64031): pid=469118 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928327.678:64032): pid=469118 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786771796D6D626E6B6467646A63676863766C697A71737A6870756A7877706D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383332372E343330333835362D36303431302D3134343235333031303031363433312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928327.679:64033): pid=469118 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928327.686:64034): pid=469118 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928329.584:64035): prog-id=2378 op=LOAD type=SYSCALL msg=audit(1764928329.584:64035): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe530284b0 a2=90 a3=9500000000 items=0 ppid=469264 pid=469265 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928329.584:64035): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326238323133383431643735623965343365306663623130313734633738 type=BPF msg=audit(1764928329.638:64036): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928330.020:64037): prog-id=2379 op=LOAD type=SYSCALL msg=audit(1764928330.020:64037): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffced1823f0 a2=90 a3=9500000001 items=0 ppid=469304 pid=469305 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928330.020:64037): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356533363137336366346633653331333735316337646264333761326539 type=BPF msg=audit(1764928330.447:64038): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928330.629:64039): pid=469118 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928330.630:64040): pid=469118 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928330.636:64041): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928330.636:64042): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928330.654:64043): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928330.654:64044): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928330.656:64045): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469345 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928330.684:64046): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928330.685:64047): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928330.820:64048): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928330.820:64049): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928330.822:64050): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469359 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928330.849:64051): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928330.850:64052): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928330.864:64053): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928330.864:64054): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928330.865:64055): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469372 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928330.898:64056): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928330.899:64057): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928330.920:64058): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928330.920:64059): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928330.922:64060): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469391 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928330.965:64061): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928330.965:64062): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928330.990:64063): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928330.990:64064): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928330.992:64065): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469404 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928331.018:64066): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928331.018:64067): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928331.037:64068): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928331.037:64069): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928331.039:64070): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469418 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928331.090:64071): pid=469433 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928331.090:64072): pid=469433 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B747869626965636B727A6378656A716B767473726F6566737668766F697A6F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383333302E383531373234342D36303432332D34383637373037313631383332342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928331.093:64073): pid=469433 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928331.099:64074): pid=469433 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928332.642:64075): prog-id=2380 op=LOAD type=SYSCALL msg=audit(1764928332.642:64075): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffd6493e50 a2=90 a3=9500000000 items=0 ppid=469578 pid=469580 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928332.642:64075): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323035663131373463353566623266643662656337663737346337303961 type=BPF msg=audit(1764928332.694:64076): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928333.047:64077): prog-id=2381 op=LOAD type=SYSCALL msg=audit(1764928333.047:64077): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd3481b4b0 a2=90 a3=9500000001 items=0 ppid=469620 pid=469621 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928333.047:64077): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656334643866366565373364306632626332376633613537663865303339 type=BPF msg=audit(1764928333.445:64078): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928333.550:64079): pid=469433 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928333.550:64080): pid=469433 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928333.554:64081): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928333.554:64082): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928333.570:64083): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928333.570:64084): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928333.572:64085): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469661 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928333.600:64086): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928333.600:64087): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928333.799:64088): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928333.799:64089): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928333.800:64090): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469675 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928333.827:64091): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928333.828:64092): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928333.840:64093): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928333.840:64094): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928333.841:64095): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469688 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928333.874:64096): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928333.874:64097): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928333.890:64098): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928333.890:64099): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928333.891:64100): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469707 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928333.927:64101): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928333.927:64102): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928333.950:64103): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928333.950:64104): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928333.951:64105): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469720 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928333.975:64106): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928333.975:64107): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928333.993:64108): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928333.993:64109): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928333.994:64110): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=469734 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928334.053:64111): pid=469749 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928334.054:64112): pid=469749 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6B6C6377626A66636C74647178696D68766567616D776A7261616363706373203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383333332E3832393730372D36303434302D3230373430383936353838383337342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928334.055:64113): pid=469749 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928334.060:64114): pid=469749 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928335.946:64115): prog-id=2382 op=LOAD type=SYSCALL msg=audit(1764928335.946:64115): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff1fef20d0 a2=90 a3=9500000000 items=0 ppid=469931 pid=469932 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928335.946:64115): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656434626538326234616338633030366136613433616433613035613630 type=BPF msg=audit(1764928336.001:64116): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928336.350:64117): prog-id=2383 op=LOAD type=SYSCALL msg=audit(1764928336.350:64117): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd91532360 a2=90 a3=9500000001 items=0 ppid=469973 pid=469974 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928336.350:64117): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313230326236653261653564306632346365393239663930353134396433 type=CRYPTO_KEY_USER msg=audit(1764928336.865:64118): pid=468837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=BPF msg=audit(1764928336.884:64119): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928337.029:64120): pid=469749 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928337.030:64121): pid=469749 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928337.035:64122): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928337.035:64123): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928337.050:64124): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928337.050:64125): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928337.051:64126): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470015 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928337.087:64127): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928337.087:64128): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928337.376:64129): pid=468985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=468985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928338.282:64130): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928338.282:64131): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928338.283:64132): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470029 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928338.316:64133): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928338.316:64134): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928338.328:64135): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928338.328:64136): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928338.330:64137): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470042 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928338.366:64138): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928338.366:64139): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928338.386:64140): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928338.386:64141): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928338.388:64142): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470061 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928338.431:64143): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928338.432:64144): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928338.446:64145): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928338.446:64146): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928338.448:64147): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470074 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928338.479:64148): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928338.479:64149): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928338.494:64150): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928338.494:64151): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928338.496:64152): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470088 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928338.566:64153): pid=470103 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928338.566:64154): pid=470103 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6F69766E787078786F7271706976746C716B6B73766777786961786D6D7061203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383333382E333138313430372D36303439392D3231353432333238303231303933342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928338.568:64155): pid=470103 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928338.574:64156): pid=470103 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928338.876:64157): prog-id=2384 op=LOAD type=SYSCALL msg=audit(1764928338.876:64157): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff5cc81a20 a2=90 a3=9500000000 items=0 ppid=470120 pid=470121 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928338.876:64157): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343135353263653463636364643731336466656332336139386563363838 type=BPF msg=audit(1764928339.350:64158): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1764928339.351:64159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928339.449:64160): pid=470103 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928339.450:64161): pid=470103 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928339.454:64162): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928339.454:64163): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928339.468:64164): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928339.468:64165): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928339.471:64166): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470168 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928339.502:64167): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928339.502:64168): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928339.568:64169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928339.680:64170): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928339.680:64171): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928339.681:64172): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470199 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928339.711:64173): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928339.711:64174): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928339.723:64175): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928339.723:64176): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928339.725:64177): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470212 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928339.758:64178): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928339.758:64179): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928339.778:64180): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928339.778:64181): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928339.779:64182): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470231 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928339.816:64183): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928339.816:64184): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928339.836:64185): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928339.836:64186): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928339.838:64187): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470244 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928339.864:64188): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928339.864:64189): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928339.879:64190): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928339.879:64191): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928339.882:64192): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470258 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928339.930:64193): pid=470273 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928339.930:64194): pid=470273 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74677272626475727462687676686A636273726C666D6978727A7265636B6E67203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383333392E373132393231392D36303531362D3233333834343439353435353032362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928339.931:64195): pid=470273 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928339.935:64196): pid=470273 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928340.261:64197): prog-id=2385 op=LOAD type=SYSCALL msg=audit(1764928340.261:64197): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdf9a11430 a2=90 a3=9500000000 items=0 ppid=470290 pid=470291 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928340.261:64197): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663733383564376566363433393665353530373366623830383232363761 type=BPF msg=audit(1764928340.729:64198): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928340.837:64199): pid=470273 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928340.837:64200): pid=470273 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928340.841:64201): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928340.841:64202): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928340.858:64203): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928340.858:64204): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928340.859:64205): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470329 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928340.889:64206): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928340.889:64207): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928340.950:64208): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928340.950:64209): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928340.952:64210): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470343 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928340.978:64211): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928340.978:64212): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928340.996:64213): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928340.996:64214): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928340.998:64215): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470356 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928341.019:64216): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928341.019:64217): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928341.039:64218): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928341.039:64219): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928341.041:64220): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470375 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928341.081:64221): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928341.081:64222): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928341.100:64223): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928341.100:64224): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928341.102:64225): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470388 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928341.124:64226): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928341.124:64227): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928341.139:64228): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928341.139:64229): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928341.141:64230): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470402 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928341.208:64231): pid=470417 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928341.209:64232): pid=470417 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787967727176716C6775716C64637168626C6D6C6664767663627A7878786C64203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383334302E393830353438362D36303532352D3132323433313439383637363732382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928341.209:64233): pid=470417 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928341.214:64234): pid=470417 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928341.535:64235): prog-id=2386 op=LOAD type=SYSCALL msg=audit(1764928341.535:64235): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcf98b4720 a2=90 a3=9500000000 items=0 ppid=470434 pid=470435 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928341.535:64235): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613066383635393830303663616664363962633737336661646666613861 type=USER_LOGIN msg=audit(1764928342.010:64236): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928342.010:64237): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928342.027:64238): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1764928342.072:64239): pid=470459 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928342.072:64240): pid=470459 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928342.073:64241): pid=470459 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928342.077:64242): pid=470459 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928342.081:64243): pid=470459 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928342.081:64244): pid=470459 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928342.086:64245): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928342.086:64246): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928342.154:64247): pid=470417 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928342.154:64248): pid=470417 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928342.158:64249): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928342.158:64250): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928342.172:64251): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928342.172:64252): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928342.174:64253): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470487 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928342.206:64254): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928342.206:64255): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928342.497:64256): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928342.497:64257): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928342.556:64258): pid=470501 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928342.557:64259): pid=470501 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928342.558:64260): pid=470501 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928342.562:64261): pid=470501 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928342.564:64262): pid=470501 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928342.565:64263): pid=470501 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928342.569:64264): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928342.569:64265): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928342.589:64266): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928342.590:64267): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928342.645:64268): pid=470516 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928342.646:64269): pid=470516 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928342.646:64270): pid=470516 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928342.649:64271): pid=470516 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928343.259:64272): pid=470516 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928343.260:64273): pid=470516 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928343.327:64274): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928343.327:64275): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928343.566:64276): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928343.566:64277): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928343.617:64278): pid=470564 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928343.617:64279): pid=470564 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928343.618:64280): pid=470564 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928343.621:64281): pid=470564 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928343.623:64282): pid=470564 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928343.624:64283): pid=470564 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928343.626:64284): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928343.626:64285): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764928350.011:64286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928350.143:64287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928351.622:64288): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928351.622:64289): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928351.624:64290): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470599 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928351.651:64291): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928351.651:64292): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928351.668:64293): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928351.668:64294): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928351.669:64295): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470612 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928351.701:64296): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928351.703:64297): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928351.722:64298): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928351.722:64299): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928351.723:64300): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470631 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928351.760:64301): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928351.760:64302): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928351.774:64303): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928351.774:64304): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928351.774:64305): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470644 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928351.798:64306): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928351.799:64307): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928351.814:64308): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928351.814:64309): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928351.816:64310): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470658 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928351.885:64311): pid=470673 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928351.885:64312): pid=470673 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78626C70686D757A776675707A7077657276796B79656A62787A7371676E6579203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383335312E363533363232342D36303637312D39373731323831343630323230392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928351.885:64313): pid=470673 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928351.889:64314): pid=470673 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928352.234:64315): prog-id=2387 op=LOAD type=SYSCALL msg=audit(1764928352.234:64315): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcb377bdc0 a2=90 a3=9500000000 items=0 ppid=470691 pid=470692 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928352.234:64315): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303961626438303034646430643163313838646462623834393264313034 type=USER_LOGIN msg=audit(1764928352.685:64316): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928352.685:64317): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928352.696:64318): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1764928352.739:64319): pid=470722 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928352.739:64320): pid=470722 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928352.741:64321): pid=470722 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928352.744:64322): pid=470722 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928352.746:64323): pid=470722 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928352.747:64324): pid=470722 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928352.749:64325): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928352.749:64326): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928352.808:64327): pid=470673 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928352.808:64328): pid=470673 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928352.813:64329): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928352.813:64330): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928352.826:64331): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928352.827:64332): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928352.828:64333): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470746 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928352.856:64334): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928352.857:64335): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928352.884:64336): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928352.884:64337): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928352.885:64338): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470760 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928352.917:64339): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928352.917:64340): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928352.931:64341): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928352.932:64342): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928352.933:64343): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470773 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928352.961:64344): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928352.961:64345): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928352.980:64346): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928352.980:64347): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928352.982:64348): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470792 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928353.027:64349): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928353.027:64350): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928353.042:64351): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928353.043:64352): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928353.094:64353): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470805 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928353.125:64354): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928353.126:64355): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928353.141:64356): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928353.141:64357): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928353.143:64358): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470819 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928353.195:64359): pid=470834 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928353.195:64360): pid=470834 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666E717171616576696A746A706C6D746F71727875716F777A7463706474787A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383335322E393230313337362D36303637312D3139393436313731353932303832342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928353.196:64361): pid=470834 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928354.275:64362): pid=470834 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928354.782:64363): prog-id=2388 op=LOAD type=SYSCALL msg=audit(1764928354.782:64363): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcb5214ae0 a2=90 a3=9500000000 items=0 ppid=470852 pid=470853 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928354.782:64363): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643932623130663037626165636363663266666365663334626361366534 type=USER_LOGIN msg=audit(1764928355.256:64364): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928355.256:64365): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928355.261:64366): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1764928355.313:64367): pid=470878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928355.313:64368): pid=470878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928355.314:64369): pid=470878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928355.318:64370): pid=470878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928355.322:64371): pid=470878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928355.322:64372): pid=470878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928355.326:64373): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928355.326:64374): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928355.394:64375): pid=470834 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928355.395:64376): pid=470834 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928355.399:64377): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928355.399:64378): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928355.415:64379): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928355.415:64380): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928355.417:64381): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470906 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928355.450:64382): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928355.450:64383): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928355.481:64384): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928355.481:64385): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928355.483:64386): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470920 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928355.518:64387): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928355.518:64388): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928355.533:64389): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928355.533:64390): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928355.534:64391): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470933 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928355.569:64392): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928355.570:64393): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928355.588:64394): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928355.588:64395): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928355.590:64396): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470952 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928355.638:64397): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928355.638:64398): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928355.656:64399): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928355.656:64400): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928355.658:64401): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470965 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928355.690:64402): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928355.690:64403): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928355.712:64404): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928355.712:64405): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928355.715:64406): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470979 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928355.780:64407): pid=470994 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928355.780:64408): pid=470994 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676F627979786477746461686F786368787A736461766D686E69756F7A6C6A62203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383335352E353230383233352D36303637312D3230323034353639323438353634312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928355.782:64409): pid=470994 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928355.786:64410): pid=470994 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928356.096:64411): prog-id=2389 op=LOAD type=SYSCALL msg=audit(1764928356.096:64411): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff21eb14d0 a2=90 a3=9500000000 items=0 ppid=471012 pid=471013 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928356.096:64411): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306266336466663062373263376264306631386532306363373566396331 type=USER_LOGIN msg=audit(1764928356.520:64412): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928356.521:64413): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928356.540:64414): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1764928356.581:64415): pid=471039 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928356.581:64416): pid=471039 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928356.582:64417): pid=471039 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928356.586:64418): pid=471039 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928356.590:64419): pid=471039 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928356.591:64420): pid=471039 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928356.594:64421): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928356.594:64422): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764928356.614:64423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928356.681:64424): pid=470994 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928356.681:64425): pid=470994 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928356.685:64426): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928356.685:64427): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928356.702:64428): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928356.702:64429): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928356.704:64430): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471079 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928356.743:64431): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928356.743:64432): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928356.771:64433): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928356.771:64434): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928356.773:64435): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471108 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928356.801:64436): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928356.801:64437): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928356.813:64438): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928356.813:64439): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928356.815:64440): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471124 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928356.846:64441): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928356.846:64442): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928356.863:64443): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928356.863:64444): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928356.865:64445): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471145 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928356.867:64446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928356.902:64447): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928356.903:64448): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928356.918:64449): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928356.918:64450): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928356.921:64451): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471158 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928356.945:64452): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928356.945:64453): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928356.963:64454): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928356.963:64455): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928356.964:64456): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471172 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_START msg=audit(1764928357.016:64457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928357.019:64458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764928357.020:64459): pid=471187 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928357.020:64460): pid=471187 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74636D726F6B6F777963696779676F7565737667797868627A707A726E6E7974203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383335362E383034303339322D36303637312D3235363238313535363631333634382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928357.021:64461): pid=471187 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928357.025:64462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764928357.031:64463): pid=471187 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928357.138:64464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928357.142:64465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928357.277:64466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928357.353:64467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928357.371:64468): prog-id=2390 op=LOAD type=SYSCALL msg=audit(1764928357.371:64468): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff29852bc0 a2=90 a3=9500000000 items=0 ppid=471324 pid=471326 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928357.371:64468): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656635303935653963383834326538313930356330343830633666386464 type=SERVICE_STOP msg=audit(1764928357.380:64469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928357.461:64470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928357.576:64471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928357.822:64472): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928357.822:64473): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928357.829:64474): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1764928357.886:64475): pid=471376 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928357.886:64476): pid=471376 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928357.887:64477): pid=471376 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928357.894:64478): pid=471376 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928357.898:64479): pid=471376 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928357.898:64480): pid=471376 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928357.903:64481): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928357.903:64482): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928357.945:64483): pid=471187 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928357.946:64484): pid=471187 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928357.950:64485): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928357.950:64486): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928357.964:64487): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928357.964:64488): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928357.965:64489): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471399 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928357.997:64490): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928357.997:64491): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928358.028:64492): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928358.028:64493): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928358.030:64494): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471413 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928358.058:64495): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928358.058:64496): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928358.071:64497): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928358.071:64498): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928358.073:64499): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471426 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928358.111:64500): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928358.111:64501): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928358.131:64502): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928358.131:64503): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928358.135:64504): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471445 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928358.182:64505): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928358.182:64506): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928358.195:64507): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928358.195:64508): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928358.197:64509): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471458 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928358.229:64510): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928358.229:64511): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928358.245:64512): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928358.245:64513): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928358.246:64514): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471472 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928358.315:64515): pid=471487 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928358.315:64516): pid=471487 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66746171787979787579647964756E666A647379736A70736E7278746E61676A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383335382E303630313536362D36303637312D3234373837353532393936373030352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928358.316:64517): pid=471487 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928358.321:64518): pid=471487 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928358.675:64519): prog-id=2391 op=LOAD type=SYSCALL msg=audit(1764928358.675:64519): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd852d94c0 a2=90 a3=9500000000 items=0 ppid=471505 pid=471506 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928358.675:64519): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303931393430613365313364636430663933653134633133653030346164 type=BPF msg=audit(1764928359.128:64520): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1764928359.137:64521): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928359.137:64522): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928359.193:64523): pid=471541 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928359.194:64524): pid=471541 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928359.194:64525): pid=471541 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928359.197:64526): pid=471541 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928359.201:64527): pid=471541 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928359.201:64528): pid=471541 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928359.204:64529): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928359.204:64530): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928359.239:64531): pid=471487 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928359.239:64532): pid=471487 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928359.243:64533): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928359.243:64534): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928359.261:64535): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928359.261:64536): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928359.262:64537): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471561 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928359.293:64538): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928359.293:64539): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928359.325:64540): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928359.325:64541): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928359.326:64542): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471575 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928359.355:64543): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928359.355:64544): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928359.368:64545): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928359.368:64546): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928359.369:64547): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471588 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928359.410:64548): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928359.410:64549): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928359.430:64550): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928359.431:64551): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928359.433:64552): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471607 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928359.480:64553): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928359.481:64554): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928359.499:64555): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928359.499:64556): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928359.501:64557): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471620 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928359.530:64558): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928359.531:64559): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928359.549:64560): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928359.549:64561): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928359.552:64562): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471634 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928359.618:64563): pid=471649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928359.619:64564): pid=471649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A706B6665636569646266736263616570737565636164706172716C64616F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383335392E3335363930362D36303637312D3233373634373835343338393134342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928359.620:64565): pid=471649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928359.623:64566): pid=471649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928359.905:64567): pid=470579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=470579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=BPF msg=audit(1764928359.939:64568): prog-id=2392 op=LOAD type=SYSCALL msg=audit(1764928359.939:64568): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd6448e640 a2=90 a3=9500000000 items=0 ppid=471666 pid=471667 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928359.939:64568): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386432393336336465373135313663396431663563626665346437313464 type=USER_LOGIN msg=audit(1764928360.406:64569): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928360.406:64570): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928360.426:64571): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1764928360.456:64572): pid=471692 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928360.457:64573): pid=471692 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928360.457:64574): pid=471692 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928360.460:64575): pid=471692 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928360.463:64576): pid=471692 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928360.464:64577): pid=471692 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928360.466:64578): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928360.466:64579): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928360.529:64580): pid=471649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928360.530:64581): pid=471649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928360.534:64582): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928360.534:64583): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928360.548:64584): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928360.548:64585): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928360.550:64586): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471720 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928360.582:64587): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928360.582:64588): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928360.643:64589): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928360.644:64590): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928360.646:64591): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471734 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928360.675:64592): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928360.676:64593): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928360.687:64594): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928360.687:64595): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928360.688:64596): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471747 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928360.722:64597): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928360.722:64598): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928360.863:64599): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928360.863:64600): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928360.865:64601): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471766 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928360.909:64602): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928360.909:64603): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928360.922:64604): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928360.922:64605): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928360.924:64606): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471779 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928360.952:64607): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928360.952:64608): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928360.968:64609): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928360.968:64610): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928360.970:64611): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471793 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928361.033:64612): pid=471808 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928361.034:64613): pid=471808 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928361.034:64614): pid=471808 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928361.037:64615): pid=471808 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928361.365:64616): prog-id=2393 op=LOAD type=SYSCALL msg=audit(1764928361.365:64616): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd0ebd3410 a2=90 a3=9500000000 items=0 ppid=471825 pid=471826 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928361.365:64616): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663435353465353538653164313066323961393833393638356138666534 type=BPF msg=audit(1764928361.817:64617): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928361.935:64618): pid=471808 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928361.936:64619): pid=471808 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928361.940:64620): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928361.940:64621): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928361.954:64622): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928361.954:64623): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928361.956:64624): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471864 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928361.985:64625): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928361.986:64626): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928364.666:64627): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=467822 suid=1000 rport=44028 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764928364.666:64628): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467822 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764928364.670:64629): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1764928364.671:64630): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764928364.671:64631): pid=467804 uid=0 auid=1000 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=USER_LOGIN msg=audit(1764928368.803:64632): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928368.803:64633): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928368.858:64634): pid=471878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928368.858:64635): pid=471878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928368.858:64636): pid=471878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928368.862:64637): pid=471878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928368.865:64638): pid=471878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928368.865:64639): pid=471878 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928368.867:64640): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928368.868:64641): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764928370.007:64642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928370.178:64643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928371.030:64644): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928371.030:64645): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928371.072:64646): pid=471918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928371.073:64647): pid=471918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928371.073:64648): pid=471918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928371.077:64649): pid=471918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928371.079:64650): pid=471918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928371.079:64651): pid=471918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928371.082:64652): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928371.082:64653): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928371.581:64654): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928371.582:64655): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928371.644:64656): pid=471933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928371.644:64657): pid=471933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928371.645:64658): pid=471933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928371.648:64659): pid=471933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928371.651:64660): pid=471933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928371.652:64661): pid=471933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928371.656:64662): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928371.656:64663): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_STOP msg=audit(1764928374.763:64664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928381.011:64665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928381.275:64666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928385.500:64667): pid=471967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928385.767:64668): pid=471966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=471967 suid=74 rport=50898 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928385.767:64669): pid=471966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=471967 suid=74 rport=50898 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928387.012:64670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928387.271:64671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928388.017:64672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928388.022:64673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928388.026:64674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928388.030:64675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928388.035:64676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928388.391:64677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928388.420:64678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928388.454:64679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928388.598:64680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928388.636:64681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928389.038:64682): pid=471966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=471967 suid=74 rport=50898 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928389.038:64683): pid=471966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471967 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928389.039:64684): pid=471966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928389.040:64685): pid=471966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=471966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928389.040:64686): pid=471966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928392.153:64687): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928392.153:64688): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928392.155:64689): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472143 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928392.193:64690): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928392.193:64691): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928392.206:64692): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928392.206:64693): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928392.208:64694): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472156 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928392.246:64695): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928392.247:64696): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928392.269:64697): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928392.270:64698): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928392.271:64699): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472175 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928392.322:64700): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928392.322:64701): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928392.339:64702): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928392.339:64703): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928392.340:64704): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472188 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928392.375:64705): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928392.375:64706): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928392.390:64707): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928392.390:64708): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928392.392:64709): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472202 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928392.467:64710): pid=472217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928392.468:64711): pid=472217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D7A6E6D6C7875676C72736C6C78677176766D6E736471726E79706C72786F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383339322E313935303130322D36303733302D3135353535363135363530363037372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928392.469:64712): pid=472217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928392.475:64713): pid=472217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928392.788:64714): prog-id=2394 op=LOAD type=SYSCALL msg=audit(1764928392.788:64714): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffde06fca30 a2=90 a3=9500000000 items=0 ppid=472234 pid=472235 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928392.788:64714): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663964363963313535653062633933653632613261326161623032656235 type=BPF msg=audit(1764928393.227:64715): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928393.376:64716): pid=472217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928393.376:64717): pid=472217 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928393.381:64718): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928393.381:64719): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928393.398:64720): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928393.398:64721): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928393.400:64722): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472273 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928393.433:64723): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928393.433:64724): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928393.725:64725): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928393.726:64726): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928393.728:64727): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472287 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928393.758:64728): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928393.759:64729): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928393.772:64730): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928393.772:64731): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928393.773:64732): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472300 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928393.812:64733): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928393.813:64734): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928393.836:64735): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928393.836:64736): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928393.838:64737): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472319 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928393.886:64738): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928393.887:64739): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928393.902:64740): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928393.902:64741): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928393.903:64742): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472332 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928393.936:64743): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928393.936:64744): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928393.952:64745): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928393.952:64746): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928393.954:64747): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472346 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928394.017:64748): pid=472361 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928394.017:64749): pid=472361 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7165667271766863626E646269786275646B6171726B776E6A616364686A736A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383339332E373630353436342D36303734372D31393735383838313838313237362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928394.018:64750): pid=472361 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928394.025:64751): pid=472361 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928394.365:64752): prog-id=2395 op=LOAD type=SYSCALL msg=audit(1764928394.365:64752): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdfc135130 a2=90 a3=9500000000 items=0 ppid=472378 pid=472379 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928394.365:64752): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353133376238383837623564383030373439373266353131333139356633 type=BPF msg=audit(1764928394.838:64753): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928394.937:64754): pid=472361 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928394.937:64755): pid=472361 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928394.942:64756): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928394.942:64757): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928394.960:64758): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928394.960:64759): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928394.962:64760): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472417 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928394.992:64761): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928394.992:64762): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928395.119:64763): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928395.119:64764): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928395.121:64765): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472431 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928395.152:64766): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928395.152:64767): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928395.167:64768): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928395.167:64769): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928395.168:64770): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472444 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928395.206:64771): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928395.206:64772): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928395.226:64773): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928395.226:64774): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928395.228:64775): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472464 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928395.282:64776): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928395.282:64777): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928395.296:64778): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928395.296:64779): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928395.298:64780): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472491 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928395.339:64781): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928395.339:64782): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928395.355:64783): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928395.355:64784): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928395.358:64785): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472511 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928395.432:64786): pid=472537 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928395.433:64787): pid=472537 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A646A73727462717A637879626A786B766A7177726479637A7376736A74646C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383339352E313534343435362D36303736302D39333830373132303033333338382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928395.434:64788): pid=472537 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928395.438:64789): pid=472537 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928395.773:64790): prog-id=2396 op=LOAD type=SYSCALL msg=audit(1764928395.773:64790): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcc329dd60 a2=90 a3=9500000000 items=0 ppid=472556 pid=472557 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928395.773:64790): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356430623036636232613330316635343639373131656161643161323632 type=BPF msg=audit(1764928396.249:64791): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928396.337:64792): pid=472537 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928396.338:64793): pid=472537 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928396.341:64794): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928396.341:64795): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928396.354:64796): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928396.354:64797): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928396.355:64798): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472598 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928396.379:64799): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928396.379:64800): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928396.420:64801): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928396.420:64802): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928396.421:64803): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472612 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928396.449:64804): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928396.449:64805): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928396.465:64806): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928396.465:64807): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928396.467:64808): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472625 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928396.502:64809): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928396.502:64810): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928396.521:64811): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928396.521:64812): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928396.523:64813): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472644 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928396.565:64814): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928396.565:64815): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928396.579:64816): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928396.579:64817): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928396.580:64818): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472657 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928396.612:64819): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928396.612:64820): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928396.627:64821): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928396.627:64822): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928396.628:64823): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472671 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928396.695:64824): pid=472686 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928396.696:64825): pid=472686 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636D6F767A746A72676A7369766E6B746E68727879736C69707A77616A6D6668203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383339362E3435303935332D36303736302D3233393331393132353434303634362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928396.696:64826): pid=472686 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928396.702:64827): pid=472686 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928397.069:64828): prog-id=2397 op=LOAD type=SYSCALL msg=audit(1764928397.069:64828): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff2bd91830 a2=90 a3=9500000000 items=0 ppid=472704 pid=472705 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928397.069:64828): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346134353133643937663363303530663364326639313963336361393863 type=BPF msg=audit(1764928397.580:64829): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928397.773:64830): pid=472686 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928397.773:64831): pid=472686 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928397.779:64832): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928397.779:64833): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928397.793:64834): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928397.793:64835): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928397.795:64836): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472744 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928397.827:64837): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928397.827:64838): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928397.857:64839): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928397.858:64840): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928397.859:64841): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472758 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928397.885:64842): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928397.885:64843): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928397.900:64844): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928397.900:64845): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928397.901:64846): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472771 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928397.932:64847): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928397.932:64848): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928397.947:64849): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928397.948:64850): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928397.950:64851): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472793 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928397.997:64852): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928397.998:64853): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928398.011:64854): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928398.011:64855): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928398.013:64856): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472806 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928398.043:64857): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928398.043:64858): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928398.061:64859): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928398.062:64860): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928398.063:64861): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472820 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928398.123:64862): pid=472835 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928398.124:64863): pid=472835 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736D757879686B6C726773637A7A6968667A7A61797875776D666776747A6A77203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383339372E383837313636352D36303736302D3230313730353634363039353733332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928398.125:64864): pid=472835 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928398.129:64865): pid=472835 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928398.224:64866): pid=472839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928398.474:64867): pid=472838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=472839 suid=74 rport=53456 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928398.474:64868): pid=472838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=472839 suid=74 rport=53456 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1764928398.548:64869): prog-id=2398 op=LOAD type=SYSCALL msg=audit(1764928398.548:64869): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd9dc4d520 a2=90 a3=9500000000 items=0 ppid=472854 pid=472855 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928398.548:64869): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623635336238366136326637666135333763626432346531653630663131 type=USER_LOGIN msg=audit(1764928398.912:64870): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928398.912:64871): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928398.962:64872): pid=472877 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928398.962:64873): pid=472877 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928398.963:64874): pid=472877 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928398.966:64875): pid=472877 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928398.969:64876): pid=472877 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928398.969:64877): pid=472877 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928398.972:64878): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928398.972:64879): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928398.975:64880): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928398.975:64881): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928399.035:64882): pid=472892 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928399.035:64883): pid=472892 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928399.036:64884): pid=472892 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928399.038:64885): pid=472892 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=BPF msg=audit(1764928399.070:64886): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928399.168:64887): pid=472835 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928399.168:64888): pid=472835 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928399.172:64889): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928399.172:64890): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928399.186:64891): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928399.186:64892): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928399.189:64893): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472924 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928399.221:64894): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928399.222:64895): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928399.411:64896): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928399.411:64897): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928399.413:64898): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472953 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928399.451:64899): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928399.452:64900): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928399.466:64901): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928399.466:64902): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928399.468:64903): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472978 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928399.514:64904): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928399.514:64905): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928399.534:64906): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928399.534:64907): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928399.536:64908): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472997 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928399.583:64909): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928399.583:64910): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928399.598:64911): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928399.598:64912): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928399.600:64913): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473017 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928399.634:64914): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928399.634:64915): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928399.648:64916): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928399.648:64917): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928399.650:64918): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473038 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928399.719:64919): pid=473053 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928399.719:64920): pid=473053 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74686771727263726D746D6E7777736F70776C72716F6865776F6D6D7464716A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383339392E343533373735362D36303738372D3235333337343730353936353832332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928399.721:64921): pid=473053 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928399.726:64922): pid=473053 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928399.825:64923): pid=472838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=472839 suid=74 rport=53456 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928399.825:64924): pid=472838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472839 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928399.827:64925): pid=472838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928399.827:64926): pid=472838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=472838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928399.828:64927): pid=472838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1764928400.037:64928): prog-id=2399 op=LOAD type=SYSCALL msg=audit(1764928400.037:64928): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe272cf350 a2=90 a3=9500000000 items=0 ppid=473093 pid=473094 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928400.037:64928): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326465386366383031376237326237376462646139643837663237333163 type=SERVICE_START msg=audit(1764928400.465:64929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928400.465:64930): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928400.651:64931): pid=473053 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928400.651:64932): pid=473053 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928400.656:64933): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928400.656:64934): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928400.667:64935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928400.684:64936): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928400.684:64937): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928400.686:64938): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473174 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928400.718:64939): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928400.718:64940): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1764928401.619:64941): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1764928402.190:64942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-79feddb1-4bfc-557f-83b9-0d57c9f66c1b@mds.mds.np0005546415.aphosd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928402.508:64943): prog-id=2400 op=LOAD type=BPF msg=audit(1764928402.508:64944): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928402.508:64945): prog-id=2401 op=LOAD type=BPF msg=audit(1764928402.508:64946): prog-id=2402 op=LOAD type=BPF msg=audit(1764928402.508:64947): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928402.508:64948): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928402.511:64949): prog-id=2403 op=LOAD type=BPF msg=audit(1764928402.511:64950): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928402.511:64951): prog-id=2404 op=LOAD type=BPF msg=audit(1764928402.511:64952): prog-id=2405 op=LOAD type=BPF msg=audit(1764928402.511:64953): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928402.511:64954): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928402.521:64955): prog-id=2406 op=LOAD type=BPF msg=audit(1764928402.521:64956): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928402.521:64957): prog-id=2407 op=LOAD type=BPF msg=audit(1764928402.521:64958): prog-id=2408 op=LOAD type=BPF msg=audit(1764928402.521:64959): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928402.521:64960): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928402.522:64961): prog-id=2409 op=LOAD type=BPF msg=audit(1764928402.522:64962): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928402.582:64963): pid=472892 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928402.582:64964): pid=472892 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928402.589:64965): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928402.589:64966): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928408.682:64967): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928408.682:64968): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928408.752:64969): pid=473269 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928408.752:64970): pid=473269 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928408.754:64971): pid=473269 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928408.761:64972): pid=473269 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928408.766:64973): pid=473269 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928408.766:64974): pid=473269 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928408.771:64975): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928408.771:64976): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928409.219:64977): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928409.219:64978): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928409.284:64979): pid=473284 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928409.285:64980): pid=473284 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928409.285:64981): pid=473284 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928409.289:64982): pid=473284 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928409.291:64983): pid=473284 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928409.291:64984): pid=473284 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928409.296:64985): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928409.296:64986): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928409.315:64987): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928409.315:64988): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928409.367:64989): pid=473299 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928409.368:64990): pid=473299 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928409.368:64991): pid=473299 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928409.371:64992): pid=473299 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928410.673:64993): pid=473299 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928410.673:64994): pid=473299 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928410.678:64995): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928410.678:64996): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928410.717:64997): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928410.717:64998): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928410.785:64999): pid=473457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928410.785:65000): pid=473457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928410.786:65001): pid=473457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928410.791:65002): pid=473457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928410.795:65003): pid=473457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928410.795:65004): pid=473457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928410.800:65005): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928410.800:65006): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928410.802:65007): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928410.802:65008): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928410.859:65009): pid=473472 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928410.859:65010): pid=473472 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928410.860:65011): pid=473472 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928410.862:65012): pid=473472 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928411.550:65013): pid=473472 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928411.550:65014): pid=473472 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928411.623:65015): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928411.624:65016): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764928412.007:65017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928412.175:65018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928418.010:65019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928418.282:65020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928419.010:65021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928419.014:65022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928419.017:65023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928419.021:65024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928419.025:65025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928419.327:65026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928419.368:65027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928419.417:65028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928419.479:65029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928419.665:65030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928423.302:65031): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928423.302:65032): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928423.372:65033): pid=473710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928423.372:65034): pid=473710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928423.374:65035): pid=473710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928423.380:65036): pid=473710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928423.384:65037): pid=473710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928423.384:65038): pid=473710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928423.388:65039): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928423.388:65040): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928425.481:65041): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928425.481:65042): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928425.548:65043): pid=473725 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928425.549:65044): pid=473725 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928425.549:65045): pid=473725 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928425.552:65046): pid=473725 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928425.556:65047): pid=473725 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928425.556:65048): pid=473725 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928425.561:65049): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928425.561:65050): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928426.009:65051): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928426.009:65052): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928426.074:65053): pid=473740 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928426.075:65054): pid=473740 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928426.075:65055): pid=473740 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928426.078:65056): pid=473740 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928426.082:65057): pid=473740 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928426.082:65058): pid=473740 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928426.086:65059): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928426.086:65060): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764928431.007:65061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928431.203:65062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928431.505:65063): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928431.506:65064): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928431.507:65065): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473781 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928431.536:65066): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928431.536:65067): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928431.550:65068): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928431.550:65069): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928431.551:65070): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473794 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928431.587:65071): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928431.587:65072): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928431.748:65073): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928431.748:65074): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928431.750:65075): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473813 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928431.795:65076): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928431.795:65077): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928431.808:65078): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928431.808:65079): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928431.810:65080): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473826 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928431.841:65081): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928431.841:65082): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928431.857:65083): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928431.857:65084): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928431.859:65085): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473840 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928431.930:65086): pid=473855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928431.931:65087): pid=473855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6A656E7072686E617965766B6E6675696A6264756B756671646C6B66696772203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383433312E353338313934342D36303832392D3233333433393030363039303134302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928431.932:65088): pid=473855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928431.937:65089): pid=473855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928432.130:65090): pid=473855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928432.131:65091): pid=473855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928432.135:65092): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928432.135:65093): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928432.148:65094): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928432.148:65095): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928432.149:65096): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473860 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928432.179:65097): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928432.179:65098): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928432.251:65099): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928432.251:65100): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928432.253:65101): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473874 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928432.280:65102): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928432.280:65103): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928432.296:65104): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928432.296:65105): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928432.297:65106): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473887 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928432.335:65107): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928432.336:65108): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928432.360:65109): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928432.361:65110): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928432.362:65111): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473906 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928432.410:65112): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928432.411:65113): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928432.425:65114): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928432.425:65115): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928432.427:65116): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473919 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928432.459:65117): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928432.459:65118): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928432.474:65119): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928432.474:65120): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928432.476:65121): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=473933 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928432.540:65122): pid=473948 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928432.540:65123): pid=473948 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C737170626A746166687078637764706A65627172767265716E6279646E75203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383433322E323832313236372D36303833382D3130373639353639323334333437392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928432.540:65124): pid=473948 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928432.543:65125): pid=473948 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=ANOM_PROMISCUOUS msg=audit(1764928433.495:65126): dev=vlan21 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="unknown(985)" type=SYSCALL msg=audit(1764928433.495:65126): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7ffeea3fad60 a2=0 a3=0 items=0 ppid=1 pid=22460 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="unknown(985)" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="unknown(985)" SGID="unknown(985)" FSGID="unknown(985)" type=PROCTITLE msg=audit(1764928433.495:65126): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=ANOM_PROMISCUOUS msg=audit(1764928433.623:65127): dev=vlan21 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="unknown(985)" type=SYSCALL msg=audit(1764928433.623:65127): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7ffeea3fab50 a2=0 a3=0 items=0 ppid=1 pid=22460 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="unknown(985)" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="unknown(985)" SGID="unknown(985)" FSGID="unknown(985)" type=PROCTITLE msg=audit(1764928433.623:65127): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=CRYPTO_KEY_USER msg=audit(1764928437.325:65128): pid=474077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928437.404:65129): pid=474076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=474077 suid=74 rport=52984 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928437.404:65130): pid=474076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=474077 suid=74 rport=52984 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928437.746:65131): pid=474076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=474077 suid=74 rport=52984 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928437.746:65132): pid=474076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474077 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928437.747:65133): pid=474076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928437.748:65134): pid=474076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928437.748:65135): pid=474076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1764928439.947:65136): pid=473948 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928439.947:65137): pid=473948 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928439.952:65138): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928439.952:65139): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928439.969:65140): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928439.969:65141): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928439.970:65142): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474120 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928440.004:65143): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928440.004:65144): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928440.174:65145): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928440.174:65146): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928440.176:65147): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474134 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928440.208:65148): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928440.208:65149): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928440.223:65150): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928440.223:65151): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928440.224:65152): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474147 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928440.261:65153): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928440.262:65154): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928440.404:65155): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928440.405:65156): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928440.406:65157): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474166 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928440.454:65158): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928440.454:65159): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928440.476:65160): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928440.476:65161): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928440.477:65162): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474179 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928440.508:65163): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928440.508:65164): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928440.530:65165): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928440.531:65166): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928440.532:65167): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474193 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928440.747:65168): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928440.748:65169): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928440.772:65170): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928440.772:65171): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928440.773:65172): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474209 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928440.801:65173): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928440.802:65174): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928440.881:65175): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928440.881:65176): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928440.883:65177): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474223 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928440.911:65178): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928440.912:65179): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928440.927:65180): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928440.927:65181): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928440.929:65182): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474236 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928440.965:65183): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928440.965:65184): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928440.984:65185): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928440.985:65186): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928440.986:65187): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474255 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928441.033:65188): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928441.033:65189): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928441.051:65190): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928441.051:65191): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928441.053:65192): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474268 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928441.086:65193): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928441.086:65194): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928441.101:65195): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928441.101:65196): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928441.103:65197): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474282 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928441.321:65198): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928441.321:65199): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928441.337:65200): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928441.337:65201): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928441.338:65202): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474298 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928441.370:65203): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928441.370:65204): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928441.448:65205): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928441.448:65206): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928441.449:65207): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474312 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928441.475:65208): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928441.475:65209): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928441.491:65210): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928441.491:65211): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928441.492:65212): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474325 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928441.532:65213): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928441.532:65214): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928441.710:65215): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928441.710:65216): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928441.712:65217): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474344 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928441.761:65218): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928441.762:65219): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928441.779:65220): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928441.779:65221): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928441.780:65222): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474357 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928441.805:65223): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928441.805:65224): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928441.823:65225): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928441.824:65226): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928441.825:65227): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474371 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928441.893:65228): pid=474386 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928441.893:65229): pid=474386 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757675616664637A766C687A767566636574777068646A61767079776A6F7963203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383434312E343736393032352D36303836372D3130363436343636383334363936332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928441.894:65230): pid=474386 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928441.899:65231): pid=474386 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928442.082:65232): pid=474386 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928442.082:65233): pid=474386 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928442.086:65234): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.086:65235): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.103:65236): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.103:65237): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.105:65238): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474389 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928442.134:65239): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.135:65240): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.186:65241): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.186:65242): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.188:65243): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474403 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928442.220:65244): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.220:65245): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.233:65246): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.233:65247): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.235:65248): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474416 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928442.271:65249): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.271:65250): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.289:65251): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.290:65252): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.291:65253): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474435 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928442.335:65254): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.335:65255): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.353:65256): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.353:65257): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.355:65258): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474448 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928442.383:65259): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.383:65260): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.398:65261): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.398:65262): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.399:65263): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474462 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928442.460:65264): pid=474477 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928442.461:65265): pid=474477 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73626E7A61637168796E6365687A6E79727579777863706E6D75717076617A61203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383434322E3232323136382D36303836372D3137393232363933383535303838332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928442.461:65266): pid=474477 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928442.479:65267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764928442.483:65268): pid=474477 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928442.612:65269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928442.661:65270): pid=474477 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928442.662:65271): pid=474477 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928442.665:65272): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.665:65273): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.681:65274): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.681:65275): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.683:65276): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474499 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928442.709:65277): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.709:65278): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.750:65279): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.750:65280): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.751:65281): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474513 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928442.777:65282): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.777:65283): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.791:65284): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.791:65285): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.793:65286): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474526 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928442.830:65287): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.830:65288): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.850:65289): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.850:65290): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.851:65291): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474545 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928442.900:65292): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.900:65293): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.913:65294): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.914:65295): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.915:65296): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474558 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928442.947:65297): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928442.947:65298): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928442.961:65299): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928442.961:65300): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928442.962:65301): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474572 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928443.026:65302): pid=474587 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928443.026:65303): pid=474587 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6E79776D7871676779677679697A6876786E71767A6467797A707767717A6D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383434322E373739313836372D36303836372D3234363434323834393032303130372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928443.027:65304): pid=474587 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928443.031:65305): pid=474587 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928443.224:65306): pid=474587 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928443.225:65307): pid=474587 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928443.229:65308): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928443.229:65309): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928443.244:65310): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928443.245:65311): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928443.246:65312): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474590 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928443.282:65313): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928443.282:65314): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928443.319:65315): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928443.320:65316): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928443.322:65317): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474604 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928443.355:65318): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928443.355:65319): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928443.367:65320): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928443.367:65321): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928443.368:65322): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474617 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928443.408:65323): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928443.408:65324): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928443.425:65325): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928443.426:65326): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928443.427:65327): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474636 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928443.475:65328): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928443.475:65329): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928443.490:65330): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928443.490:65331): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928443.491:65332): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474649 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928443.524:65333): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928443.524:65334): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928443.539:65335): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928443.539:65336): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928443.541:65337): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474663 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928443.595:65338): pid=474678 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928443.595:65339): pid=474678 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F71776F70727861706F66726564676F7567646F62746A6D6C6765626E756A65203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383434332E333537313131372D36303836372D3237313137363237303130313832382F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928443.596:65340): pid=474678 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928443.598:65341): pid=474678 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928443.755:65342): pid=474678 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928443.756:65343): pid=474678 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928443.759:65344): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928443.760:65345): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928443.775:65346): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928443.775:65347): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928443.777:65348): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474681 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928443.810:65349): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928443.810:65350): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928443.903:65351): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928443.903:65352): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928443.905:65353): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474695 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928443.938:65354): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928443.938:65355): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928443.954:65356): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928443.954:65357): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928443.956:65358): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474708 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928443.995:65359): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928443.995:65360): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928444.168:65361): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928444.169:65362): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928444.171:65363): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474727 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928444.220:65364): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928444.220:65365): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928444.239:65366): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928444.239:65367): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928444.240:65368): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474740 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928444.269:65369): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928444.269:65370): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928444.283:65371): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928444.283:65372): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928444.284:65373): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474754 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928444.328:65374): pid=474769 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928444.329:65375): pid=474769 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6771786B6164736569646B7069787768717075777973677A6A696E7276776F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383434332E393430393830372D36303839372D3137313331303832323634393230392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928444.329:65376): pid=474769 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928444.332:65377): pid=474769 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928444.504:65378): pid=474769 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928444.504:65379): pid=474769 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928444.508:65380): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928444.508:65381): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928444.528:65382): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928444.528:65383): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928444.529:65384): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474774 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928444.561:65385): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928444.561:65386): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928444.575:65387): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928444.575:65388): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928444.577:65389): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474787 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928444.604:65390): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928444.604:65391): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928444.624:65392): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928444.624:65393): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928444.625:65394): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474801 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928444.672:65395): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928444.673:65396): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928444.690:65397): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928444.690:65398): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928444.692:65399): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474814 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928444.724:65400): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928444.724:65401): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928444.740:65402): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928444.740:65403): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928444.742:65404): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474828 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928444.810:65405): pid=474843 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928444.811:65406): pid=474843 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7175696272676C756A736D626F746C6867616E706866787379687968726C6D78203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383434332E393430393830372D36303839372D3137313331303832323634393230392F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928444.812:65407): pid=474843 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928444.814:65408): pid=474843 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928445.010:65409): pid=474843 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928445.010:65410): pid=474843 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928445.014:65411): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928445.014:65412): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928445.028:65413): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928445.028:65414): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928445.030:65415): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474846 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928445.063:65416): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928445.063:65417): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928445.406:65418): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928445.406:65419): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928445.408:65420): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474860 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928445.441:65421): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928445.442:65422): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928445.459:65423): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928445.459:65424): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928445.460:65425): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474873 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928445.498:65426): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928445.498:65427): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928445.524:65428): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928445.524:65429): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928445.526:65430): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474892 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928445.573:65431): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928445.573:65432): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928445.591:65433): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928445.592:65434): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928445.593:65435): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474905 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928445.625:65436): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928445.625:65437): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928445.641:65438): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928445.641:65439): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928445.643:65440): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=474919 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928445.706:65441): pid=474934 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928445.707:65442): pid=474934 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687172696B686464666371756B7A68736E617474696B756E62786C6762776A77203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383434352E343434343639322D36303932352D313731323636343535313530342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928445.707:65443): pid=474934 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928445.710:65444): pid=474934 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928446.063:65445): prog-id=2410 op=LOAD type=SYSCALL msg=audit(1764928446.063:65445): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff6ecd4fa0 a2=90 a3=9500000000 items=0 ppid=474952 pid=474953 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928446.063:65445): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626539393364373166396262393336633836663662616330346566373838 type=USER_LOGIN msg=audit(1764928446.581:65446): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928446.581:65447): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928446.584:65448): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1764928446.655:65449): pid=474983 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928446.656:65450): pid=474983 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928446.658:65451): pid=474983 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928446.671:65452): pid=474983 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928446.675:65453): pid=474983 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928446.676:65454): pid=474983 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928446.681:65455): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928446.681:65456): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928446.732:65457): pid=474934 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928446.733:65458): pid=474934 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928446.738:65459): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928446.738:65460): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928446.753:65461): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928446.753:65462): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928446.754:65463): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475007 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928446.789:65464): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928446.789:65465): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928446.823:65466): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928446.823:65467): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928446.825:65468): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475021 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928446.856:65469): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928446.856:65470): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928446.870:65471): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928446.870:65472): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928446.871:65473): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475034 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928446.909:65474): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928446.909:65475): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928446.923:65476): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928446.923:65477): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928446.925:65478): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475053 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928446.972:65479): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928446.972:65480): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928446.984:65481): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928446.984:65482): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928446.986:65483): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475066 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928447.018:65484): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928447.019:65485): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928447.033:65486): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928447.033:65487): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928447.034:65488): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475080 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928447.102:65489): pid=475095 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928447.103:65490): pid=475095 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6662696D687978686664696C6463667A7A7965716D6562706F67767A6F6B667A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383434362E383538323337352D36303932352D3138303739323035323635353033332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928447.103:65491): pid=475095 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928447.108:65492): pid=475095 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928447.491:65493): prog-id=2411 op=LOAD type=SYSCALL msg=audit(1764928447.491:65493): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff51949390 a2=90 a3=9500000000 items=0 ppid=475112 pid=475113 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928447.491:65493): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613965656536356131306463363363636664373664386336353833646464 type=USER_LOGIN msg=audit(1764928448.016:65494): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928448.016:65495): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928448.027:65496): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1764928448.062:65497): pid=475143 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928448.062:65498): pid=475143 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928448.063:65499): pid=475143 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928448.067:65500): pid=475143 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928448.071:65501): pid=475143 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928448.071:65502): pid=475143 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928448.075:65503): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928448.075:65504): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928448.107:65505): pid=475095 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928448.107:65506): pid=475095 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928448.111:65507): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928448.111:65508): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928448.127:65509): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928448.127:65510): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928448.128:65511): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475167 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928448.150:65512): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928448.150:65513): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928448.185:65514): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928448.185:65515): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928448.187:65516): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475181 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928448.216:65517): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928448.216:65518): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928448.232:65519): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928448.232:65520): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928448.233:65521): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475194 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928448.268:65522): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928448.268:65523): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928448.288:65524): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928448.288:65525): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928448.289:65526): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475213 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928448.324:65527): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928448.324:65528): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928448.337:65529): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928448.337:65530): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928448.338:65531): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475226 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928448.365:65532): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928448.365:65533): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928448.381:65534): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928448.381:65535): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928448.384:65536): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475240 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928448.448:65537): pid=475255 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928448.449:65538): pid=475255 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70626E7863627A686874716F756D70676678626A7A6E74746A6B6A736B6E7275203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383434382E323138333733332D36303932352D39313032323835323433373135332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928448.450:65539): pid=475255 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928448.464:65540): pid=475255 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928448.466:65541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928448.726:65542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928448.812:65543): prog-id=2412 op=LOAD type=SYSCALL msg=audit(1764928448.812:65543): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff8f087f90 a2=90 a3=9500000000 items=0 ppid=475303 pid=475304 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928448.812:65543): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323965633335333730663031646164303866633966393064626533636630 type=USER_LOGIN msg=audit(1764928449.314:65544): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928449.314:65545): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928449.336:65546): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1764928449.368:65547): pid=475330 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928449.369:65548): pid=475330 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928449.370:65549): pid=475330 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928449.388:65550): pid=475330 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_START msg=audit(1764928449.390:65551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928449.392:65552): pid=475330 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928449.393:65553): pid=475330 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_START msg=audit(1764928449.395:65554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928449.397:65555): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928449.397:65556): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764928449.440:65557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928449.476:65558): pid=475255 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928449.476:65559): pid=475255 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928449.481:65560): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928449.481:65561): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928449.497:65562): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928449.497:65563): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928449.499:65564): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475397 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_START msg=audit(1764928449.502:65565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928449.526:65566): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928449.526:65567): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928449.623:65568): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928449.623:65569): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928449.625:65570): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475468 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928449.655:65571): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928449.655:65572): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928449.667:65573): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928449.667:65574): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928449.668:65575): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475489 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928449.680:65576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928449.694:65577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928449.705:65578): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928449.705:65579): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928449.712:65580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928449.722:65581): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928449.722:65582): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928449.724:65583): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475521 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928449.773:65584): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928449.773:65585): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928449.786:65586): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928449.786:65587): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928449.787:65588): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475551 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928449.799:65589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928449.817:65590): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928449.817:65591): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928449.833:65592): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928449.833:65593): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928449.838:65594): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475569 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928449.840:65595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764928449.897:65596): pid=475584 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928449.898:65597): pid=475584 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68736677696D707467746F76727374626F7972776767686473636D7A65637675203B20434550485F434F4E5441494E45525F494D4147453D72656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C617465737420434550485F434F4E5441494E45525F42494E4152593D706F646D616E202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383434392E3635363837342D36303935302D3130373234373434343332383331342F416E736962616C6C5A5F636570685F6D6B737065632E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928449.900:65598): pid=475584 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928449.907:65599): pid=475584 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928450.072:65600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928450.288:65601): prog-id=2413 op=LOAD type=SYSCALL msg=audit(1764928450.288:65601): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffe4687350 a2=90 a3=9500000000 items=0 ppid=475607 pid=475608 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928450.288:65601): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666165323031656466326631336332353963363263396639376665613864 type=BPF msg=audit(1764928450.751:65602): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928450.901:65603): pid=475584 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928450.902:65604): pid=475584 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928450.909:65605): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928450.910:65606): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928450.931:65607): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928450.931:65608): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928450.934:65609): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475647 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928450.974:65610): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928450.974:65611): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928451.194:65612): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928451.194:65613): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928451.226:65614): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475661 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928451.257:65615): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928451.258:65616): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928451.271:65617): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928451.271:65618): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928451.272:65619): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475674 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928451.309:65620): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928451.309:65621): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928451.332:65622): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928451.332:65623): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928451.333:65624): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475693 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928451.377:65625): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928451.377:65626): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928451.390:65627): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928451.390:65628): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928451.392:65629): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475706 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928451.425:65630): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928451.425:65631): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928451.441:65632): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928451.441:65633): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928451.442:65634): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475720 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928451.510:65635): pid=475735 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928451.511:65636): pid=475735 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63746676726D6B626570627A6D73756E6F71797A7668787774686D6965616467203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383435312E3236303635392D36303936352D3139353336313432393032383136312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928451.513:65637): pid=475735 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928451.518:65638): pid=475735 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928451.801:65639): prog-id=2414 op=LOAD type=SYSCALL msg=audit(1764928451.801:65639): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd678b1fb0 a2=90 a3=9500000000 items=0 ppid=475752 pid=475753 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928451.801:65639): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633633306630343734626661333766323265623030623735366461616635 type=BPF msg=audit(1764928452.245:65640): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928452.390:65641): pid=475735 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928452.390:65642): pid=475735 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928452.395:65643): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928452.395:65644): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928452.408:65645): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928452.408:65646): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928452.410:65647): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475791 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928452.445:65648): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928452.445:65649): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928452.724:65650): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928452.724:65651): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928452.726:65652): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475805 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928452.762:65653): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928452.763:65654): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928452.774:65655): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928452.774:65656): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928452.776:65657): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475818 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928452.811:65658): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928452.811:65659): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928452.831:65660): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928452.831:65661): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928452.832:65662): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475837 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928452.872:65663): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928452.872:65664): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928452.886:65665): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928452.887:65666): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928452.888:65667): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475850 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928452.918:65668): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928452.918:65669): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928452.936:65670): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928452.937:65671): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928452.939:65672): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475864 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928453.008:65673): pid=475879 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928453.009:65674): pid=475879 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62726E6678656A74756C76706B77626266676B6E616975776D6C7A6369667966203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383435322E373635343733382D36303938302D33333037343535343739343730332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928453.009:65675): pid=475879 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928453.013:65676): pid=475879 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928453.351:65677): prog-id=2415 op=LOAD type=SYSCALL msg=audit(1764928453.351:65677): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdcb933810 a2=90 a3=9500000000 items=0 ppid=475896 pid=475897 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928453.351:65677): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623534333163343636636235313133323638393662303239393134383335 type=BPF msg=audit(1764928453.800:65678): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928453.899:65679): pid=475879 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928453.900:65680): pid=475879 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928453.905:65681): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928453.905:65682): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928453.918:65683): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928453.918:65684): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928453.920:65685): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475935 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928453.953:65686): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928453.953:65687): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928453.980:65688): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928453.980:65689): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928453.981:65690): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475949 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928454.014:65691): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928454.014:65692): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928454.033:65693): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928454.033:65694): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928454.034:65695): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475962 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928454.078:65696): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928454.078:65697): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928454.099:65698): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928454.099:65699): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928454.100:65700): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475981 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928454.153:65701): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928454.153:65702): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928454.168:65703): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928454.168:65704): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928454.170:65705): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=475994 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928454.202:65706): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928454.202:65707): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928454.218:65708): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928454.218:65709): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928454.220:65710): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476008 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928454.286:65711): pid=476023 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928454.286:65712): pid=476023 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63736E7662636D796A79637967716B666B746C6A63707878787175696565797A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383435342E3031373931312D36303938302D3131333735353830323938353138302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928454.287:65713): pid=476023 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928454.291:65714): pid=476023 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928454.623:65715): prog-id=2416 op=LOAD type=SYSCALL msg=audit(1764928454.623:65715): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdd2514330 a2=90 a3=9500000000 items=0 ppid=476040 pid=476041 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928454.623:65715): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386233313934613865623665386633326261306639653061343133636266 type=BPF msg=audit(1764928455.163:65716): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928455.367:65717): pid=476023 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928455.368:65718): pid=476023 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928455.373:65719): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928455.373:65720): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928455.388:65721): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928455.388:65722): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928455.390:65723): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476080 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928455.427:65724): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928455.427:65725): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928455.459:65726): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928455.459:65727): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928455.461:65728): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476103 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928455.494:65729): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928455.495:65730): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928455.507:65731): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928455.508:65732): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928455.509:65733): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476121 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928455.555:65734): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928455.555:65735): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928455.577:65736): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928455.578:65737): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928455.579:65738): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476153 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928455.625:65739): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928455.625:65740): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928455.641:65741): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928455.641:65742): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928455.643:65743): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476172 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928455.677:65744): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928455.677:65745): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928455.693:65746): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928455.693:65747): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928455.695:65748): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476186 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928455.763:65749): pid=476201 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928455.764:65750): pid=476201 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757162746E6274766D6965746C7570716F6676726B6E696A7374636167786F67203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383435352E3439373736332D36303938302D3232333933393930323635333634342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928455.764:65751): pid=476201 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928455.770:65752): pid=476201 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928456.123:65753): prog-id=2417 op=LOAD type=SYSCALL msg=audit(1764928456.123:65753): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd99809bb0 a2=90 a3=9500000000 items=0 ppid=476219 pid=476220 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928456.123:65753): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386336373662316264366431663432656339616566656136623464656135 type=BPF msg=audit(1764928456.588:65754): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928456.707:65755): pid=476201 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928456.708:65756): pid=476201 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928456.713:65757): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928456.713:65758): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928456.730:65759): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928456.730:65760): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928456.732:65761): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476259 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928456.765:65762): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928456.765:65763): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928456.795:65764): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928456.795:65765): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928456.797:65766): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476273 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928456.828:65767): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928456.829:65768): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928456.843:65769): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928456.843:65770): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928456.844:65771): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476286 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928456.883:65772): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928456.883:65773): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928456.904:65774): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928456.904:65775): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928456.906:65776): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476305 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928456.951:65777): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928456.952:65778): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928456.968:65779): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928456.968:65780): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928456.970:65781): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476318 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928456.999:65782): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928457.000:65783): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928457.019:65784): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928457.019:65785): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928457.020:65786): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476332 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928457.084:65787): pid=476347 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928457.084:65788): pid=476347 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7066666C766979646B75756C6D72727A6F7A6169676A6B6D6966637772716F73203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383435362E3833313830332D36303938302D3133383133343535363638303537312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928457.085:65789): pid=476347 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928457.090:65790): pid=476347 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928457.495:65791): prog-id=2418 op=LOAD type=SYSCALL msg=audit(1764928457.495:65791): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff32a35610 a2=90 a3=9500000000 items=0 ppid=476365 pid=476366 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928457.495:65791): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316465396564646536636466626262303533323536613431666361366162 type=BPF msg=audit(1764928457.937:65792): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928458.134:65793): pid=476347 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928458.135:65794): pid=476347 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928458.139:65795): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928458.140:65796): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928458.154:65797): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928458.154:65798): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928458.156:65799): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476405 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928458.188:65800): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928458.189:65801): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928458.211:65802): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928458.211:65803): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928458.213:65804): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476419 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928458.246:65805): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928458.246:65806): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928458.258:65807): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928458.258:65808): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928458.260:65809): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476432 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928458.298:65810): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928458.298:65811): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928458.313:65812): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928458.313:65813): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928458.315:65814): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476451 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928458.362:65815): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928458.362:65816): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928458.377:65817): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928458.377:65818): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928458.379:65819): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476464 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928458.412:65820): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928458.412:65821): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928458.427:65822): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928458.428:65823): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928458.430:65824): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476478 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928458.486:65825): pid=476493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928458.487:65826): pid=476493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68697072716A6F707966736364797A68757779726F7968736966767266746275203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383435382E3234373735312D36303938302D3237393933353430343836303634322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928458.489:65827): pid=476493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928458.495:65828): pid=476493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_LOGIN msg=audit(1764928458.545:65829): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928458.545:65830): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928458.609:65831): pid=476496 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928458.609:65832): pid=476496 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928458.610:65833): pid=476496 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928458.613:65834): pid=476496 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928458.617:65835): pid=476496 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928458.617:65836): pid=476496 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928458.621:65837): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928458.621:65838): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928458.829:65839): prog-id=2419 op=LOAD type=SYSCALL msg=audit(1764928458.829:65839): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc319bbb20 a2=90 a3=9500000000 items=0 ppid=476525 pid=476526 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928458.829:65839): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353062623230323634333763623665356332656231633234323162373932 type=BPF msg=audit(1764928459.286:65840): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928459.477:65841): pid=476493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928459.477:65842): pid=476493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928459.482:65843): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928459.482:65844): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928459.499:65845): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928459.499:65846): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928459.501:65847): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476565 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928459.533:65848): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928459.533:65849): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928459.558:65850): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928459.558:65851): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928459.560:65852): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476579 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928459.590:65853): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928459.591:65854): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928459.611:65855): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928459.611:65856): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928459.613:65857): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476592 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928459.651:65858): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928459.651:65859): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928459.669:65860): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928459.669:65861): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928459.670:65862): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476611 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928459.715:65863): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928459.715:65864): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928459.729:65865): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928459.729:65866): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928459.731:65867): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476624 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928459.764:65868): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928459.764:65869): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928459.783:65870): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928459.783:65871): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928459.785:65872): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476638 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928459.852:65873): pid=476653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928459.853:65874): pid=476653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67787468716374696B716D67746669726E646A616C776B716969666E67796C66203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383435392E353933313530362D36303938302D3236323936313737333035363234332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928459.853:65875): pid=476653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928459.858:65876): pid=476653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928460.223:65877): prog-id=2420 op=LOAD type=SYSCALL msg=audit(1764928460.223:65877): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc19fda770 a2=90 a3=9500000000 items=0 ppid=476671 pid=476672 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928460.223:65877): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333634633733343732663764393335643965303161303336386332306666 type=BPF msg=audit(1764928460.675:65878): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928460.787:65879): pid=476653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928460.787:65880): pid=476653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928460.792:65881): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928460.792:65882): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928460.808:65883): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928460.808:65884): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928460.809:65885): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476712 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928460.839:65886): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928460.839:65887): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928460.875:65888): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928460.875:65889): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928460.876:65890): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476726 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928460.908:65891): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928460.908:65892): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928460.922:65893): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928460.922:65894): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928460.924:65895): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476739 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928460.961:65896): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928460.961:65897): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928460.980:65898): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928460.981:65899): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928460.982:65900): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476758 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928461.025:65901): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928461.026:65902): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928461.050:65903): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928461.050:65904): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928461.052:65905): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476771 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928461.086:65906): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928461.086:65907): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928461.104:65908): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928461.104:65909): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928461.106:65910): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476785 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928461.169:65911): pid=476800 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928461.169:65912): pid=476800 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67746F6172686F68657A636F6163646164706E73677165717A64656977726C68203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383436302E393130363137342D36303938302D3230343532333232323134363433372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928461.170:65913): pid=476800 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928461.175:65914): pid=476800 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_LOGIN msg=audit(1764928461.255:65915): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928461.255:65916): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928461.311:65917): pid=476803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928461.312:65918): pid=476803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928461.312:65919): pid=476803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928461.333:65920): pid=476803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_START msg=audit(1764928461.336:65921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928461.337:65922): pid=476803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928461.337:65923): pid=476803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928461.340:65924): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928461.340:65925): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_STOP msg=audit(1764928461.477:65926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928461.590:65927): prog-id=2421 op=LOAD type=SYSCALL msg=audit(1764928461.590:65927): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeb79d2c60 a2=90 a3=9500000000 items=0 ppid=476856 pid=476858 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928461.590:65927): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656432613533613339323637663534386162316533303538613163316233 type=CRYPTO_KEY_USER msg=audit(1764928461.598:65928): pid=476860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476860 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928461.772:65929): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928461.773:65930): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928461.854:65931): pid=476857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=476860 suid=74 rport=50384 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928461.854:65932): pid=476857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=476860 suid=74 rport=50384 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ACCT msg=audit(1764928461.855:65933): pid=476873 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928461.855:65934): pid=476873 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928461.857:65935): pid=476873 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928461.862:65936): pid=476873 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928461.866:65937): pid=476873 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928461.867:65938): pid=476873 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928461.872:65939): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928461.872:65940): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928462.126:65941): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928462.229:65942): pid=476800 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928462.229:65943): pid=476800 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928462.234:65944): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928462.234:65945): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928462.250:65946): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928462.250:65947): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928462.252:65948): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476914 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928462.287:65949): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928462.287:65950): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928462.310:65951): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928462.310:65952): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928462.319:65953): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928462.319:65954): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928462.321:65955): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476932 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928462.352:65956): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928462.352:65957): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928462.367:65958): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928462.368:65959): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928462.369:65960): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476955 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928462.377:65961): pid=476928 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928462.378:65962): pid=476928 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928462.380:65963): pid=476928 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928462.384:65964): pid=476928 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928462.388:65965): pid=476928 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928462.388:65966): pid=476928 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928462.393:65967): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928462.393:65968): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928462.408:65969): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928462.408:65970): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928462.426:65971): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928462.426:65972): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928462.428:65973): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476975 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928462.473:65974): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928462.473:65975): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928462.489:65976): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928462.490:65977): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928462.491:65978): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476988 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928462.528:65979): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928462.528:65980): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928462.545:65981): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928462.545:65982): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928462.546:65983): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477002 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928462.615:65984): pid=477017 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928462.615:65985): pid=477017 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E786F6E6B7362707075756E6D7874716F746A696E6B666E7970796A76756363203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383436322E333534313339332D36303938302D3236373437313235393736353338312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928462.619:65986): pid=477017 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928462.622:65987): pid=477017 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928462.932:65988): prog-id=2422 op=LOAD type=SYSCALL msg=audit(1764928462.932:65988): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd4338f160 a2=90 a3=9500000000 items=0 ppid=477034 pid=477035 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928462.932:65988): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383462356465653533663862623566323565363236333362626166353830 type=CRYPTO_KEY_USER msg=audit(1764928463.243:65989): pid=476857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=476860 suid=74 rport=50384 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928463.243:65990): pid=476857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476860 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928463.245:65991): pid=476857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928463.245:65992): pid=476857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=476857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928463.245:65993): pid=476857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1764928463.394:65994): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928463.494:65995): pid=477017 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928463.494:65996): pid=477017 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928463.498:65997): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928463.498:65998): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928463.521:65999): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928463.521:66000): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928463.522:66001): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477074 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928463.594:66002): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928463.594:66003): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928463.595:66004): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928463.595:66005): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928463.596:66006): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477088 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928463.630:66007): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928463.630:66008): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928463.644:66009): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928463.644:66010): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928463.645:66011): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477101 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928463.686:66012): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928463.686:66013): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928463.707:66014): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928463.707:66015): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928463.709:66016): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477120 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928463.762:66017): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928463.762:66018): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928463.782:66019): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928463.782:66020): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928463.784:66021): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477133 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928463.818:66022): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928463.819:66023): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928463.836:66024): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928463.836:66025): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928463.838:66026): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477147 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928463.903:66027): pid=477162 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928463.904:66028): pid=477162 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627172676F64637174756676736B7A766370656E78786D74716862666E717373203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383436332E363332353432362D36303938302D3234313133323431333130393134372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928463.905:66029): pid=477162 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928463.909:66030): pid=477162 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928464.294:66031): prog-id=2423 op=LOAD type=SYSCALL msg=audit(1764928464.294:66031): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd8bb35240 a2=90 a3=9500000000 items=0 ppid=477179 pid=477180 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928464.294:66031): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333161376538383536343635633261656364633734313236353038366234 type=BPF msg=audit(1764928464.824:66032): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928464.958:66033): pid=477162 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928464.958:66034): pid=477162 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928464.964:66035): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928464.964:66036): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928464.977:66037): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928464.977:66038): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928464.980:66039): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477219 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928465.013:66040): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928465.013:66041): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928465.037:66042): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928465.038:66043): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928465.039:66044): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477233 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928465.070:66045): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928465.070:66046): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928465.082:66047): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928465.082:66048): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928465.084:66049): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477246 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928465.121:66050): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928465.121:66051): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928465.140:66052): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928465.140:66053): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928465.142:66054): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477265 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928465.188:66055): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928465.188:66056): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928465.202:66057): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928465.203:66058): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928465.204:66059): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477278 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928465.231:66060): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928465.231:66061): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928465.249:66062): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928465.249:66063): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928465.251:66064): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477292 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928465.303:66065): pid=477307 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928465.304:66066): pid=477307 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666271666E6D636D68756D666E72756A736E756F65737170656A76637A6B6D6A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383436352E303732343530362D36303938302D3136343131313230353433383438332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928465.305:66067): pid=477307 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928465.309:66068): pid=477307 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928465.592:66069): prog-id=2424 op=LOAD type=SYSCALL msg=audit(1764928465.592:66069): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc41d80ac0 a2=90 a3=9500000000 items=0 ppid=477325 pid=477326 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928465.592:66069): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393161623735353662376564653433383138366264353338303661303065 type=BPF msg=audit(1764928466.050:66070): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1764928466.103:66071): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928466.103:66072): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928466.144:66073): pid=477307 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928466.145:66074): pid=477307 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928466.149:66075): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928466.149:66076): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928466.165:66077): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928466.165:66078): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928466.166:66079): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477377 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928466.167:66080): pid=477363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928466.168:66081): pid=477363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928466.168:66082): pid=477363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928466.172:66083): pid=477363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928466.175:66084): pid=477363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928466.175:66085): pid=477363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928466.180:66086): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928466.180:66087): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928466.197:66088): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928466.197:66089): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928466.227:66090): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928466.227:66091): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928466.229:66092): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477392 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928466.260:66093): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928466.260:66094): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928466.275:66095): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928466.275:66096): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928466.276:66097): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477405 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928466.313:66098): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928466.313:66099): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928466.357:66100): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928466.358:66101): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928466.359:66102): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477424 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928466.406:66103): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928466.406:66104): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928466.423:66105): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928466.423:66106): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928466.424:66107): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477437 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928466.462:66108): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928466.462:66109): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928466.480:66110): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928466.480:66111): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928466.483:66112): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477451 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928466.547:66113): pid=477466 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928466.548:66114): pid=477466 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75657464786F7870636A6E77766269756C64766466726E666A6E636E736B6776203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383436362E323632373937342D36303938302D31323737393035373231353737312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928466.549:66115): pid=477466 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928466.552:66116): pid=477466 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928466.944:66117): prog-id=2425 op=LOAD type=SYSCALL msg=audit(1764928466.944:66117): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd21e3d050 a2=90 a3=9500000000 items=0 ppid=477483 pid=477484 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928466.944:66117): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313737613866613538303464333536623831633335366261333061623637 type=BPF msg=audit(1764928467.480:66118): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928467.600:66119): pid=477466 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928467.601:66120): pid=477466 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928467.606:66121): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928467.606:66122): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928467.625:66123): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928467.626:66124): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928467.628:66125): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477523 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928467.665:66126): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928467.665:66127): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928467.697:66128): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928467.697:66129): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928467.699:66130): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477537 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928467.733:66131): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928467.733:66132): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928467.747:66133): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928467.748:66134): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928467.749:66135): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477550 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928467.791:66136): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928467.791:66137): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928467.809:66138): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928467.810:66139): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928467.812:66140): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477569 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928467.863:66141): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928467.864:66142): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928467.880:66143): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928467.880:66144): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928467.882:66145): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477582 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928467.920:66146): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928467.920:66147): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928467.937:66148): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928467.937:66149): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928467.940:66150): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477596 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928468.016:66151): pid=477611 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928468.016:66152): pid=477611 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65646F6E7667696A63726D6D617561757765636264746E676564686672626568203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383436372E373335343730382D36303938302D33323939343430313533313533362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928468.017:66153): pid=477611 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928468.024:66154): pid=477611 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928468.372:66155): prog-id=2426 op=LOAD type=SYSCALL msg=audit(1764928468.372:66155): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc92157570 a2=90 a3=9500000000 items=0 ppid=477628 pid=477629 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928468.372:66155): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373063356365363861396164653233363230353762363335613230663337 type=BPF msg=audit(1764928468.856:66156): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928468.973:66157): pid=477611 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928468.974:66158): pid=477611 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928468.978:66159): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928468.978:66160): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928468.994:66161): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928468.994:66162): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928468.996:66163): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477670 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928469.032:66164): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928469.032:66165): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928469.098:66166): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928469.098:66167): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928469.099:66168): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477684 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928469.131:66169): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928469.131:66170): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928469.145:66171): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928469.146:66172): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928469.147:66173): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477697 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_LOGIN msg=audit(1764928469.185:66174): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928469.185:66175): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928469.190:66176): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928469.190:66177): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928469.209:66178): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928469.209:66179): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928469.211:66180): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477729 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928469.253:66181): pid=477715 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928469.253:66182): pid=477715 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928469.254:66183): pid=477715 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928469.258:66184): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928469.258:66185): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928469.259:66186): pid=477715 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928469.263:66187): pid=477715 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928469.263:66188): pid=477715 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928469.267:66189): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928469.267:66190): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928469.273:66191): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928469.273:66192): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928469.275:66193): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477744 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928469.309:66194): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928469.310:66195): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928469.325:66196): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928469.325:66197): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928469.327:66198): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477758 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928469.398:66199): pid=477773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928469.398:66200): pid=477773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928469.399:66201): pid=477773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928469.403:66202): pid=477773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928469.792:66203): prog-id=2427 op=LOAD type=SYSCALL msg=audit(1764928469.792:66203): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd4c188030 a2=90 a3=9500000000 items=0 ppid=477791 pid=477792 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928469.792:66203): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666364393733356331393332386362343062653962613030663264386364 type=BPF msg=audit(1764928470.236:66204): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928470.371:66205): pid=477773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928470.371:66206): pid=477773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928470.375:66207): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928470.375:66208): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928470.390:66209): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928470.390:66210): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928470.393:66211): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477830 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928470.429:66212): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928470.429:66213): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928470.588:66214): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928470.588:66215): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928470.590:66216): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477844 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928470.623:66217): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928470.623:66218): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928470.636:66219): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928470.636:66220): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928470.637:66221): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477857 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928470.668:66222): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928470.668:66223): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928470.685:66224): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928470.685:66225): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928470.687:66226): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477876 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928470.718:66227): pid=477890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_END msg=audit(1764928470.729:66228): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928470.730:66229): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928470.747:66230): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928470.747:66231): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928470.748:66232): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477891 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928470.779:66233): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928470.779:66234): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928470.795:66235): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928470.795:66236): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928470.799:66237): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477905 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928470.853:66238): pid=477920 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928470.853:66239): pid=477920 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706571706666716676756367667672696B67736A6362766174646F6464777A76203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383437302E363235333333352D36313037392D3132363734383135313832303834322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928470.854:66240): pid=477920 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928470.858:66241): pid=477920 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_SESSION msg=audit(1764928470.971:66242): pid=477881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=477890 suid=74 rport=56598 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928470.971:66243): pid=477881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=477890 suid=74 rport=56598 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1764928471.166:66244): prog-id=2428 op=LOAD type=SYSCALL msg=audit(1764928471.166:66244): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc287cb040 a2=90 a3=9500000000 items=0 ppid=477936 pid=477937 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928471.166:66244): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343236306266666463346565616138313431636630623965383964626137 type=BPF msg=audit(1764928471.695:66245): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928471.826:66246): pid=477920 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928471.826:66247): pid=477920 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928471.831:66248): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928471.831:66249): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928471.847:66250): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928471.847:66251): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928471.849:66252): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477976 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928471.887:66253): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928471.887:66254): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928473.017:66255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928473.156:66256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928473.811:66257): pid=477881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=477890 suid=74 rport=56598 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928473.811:66258): pid=477881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477890 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928473.813:66259): pid=477881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.225.21 addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928473.813:66260): pid=477881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=477881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928473.813:66261): pid=477881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928476.097:66262): pid=478009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928476.349:66263): pid=478008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=478009 suid=74 rport=28192 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928476.349:66264): pid=478008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=478009 suid=74 rport=28192 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764928476.952:66265): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928476.952:66266): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928476.954:66267): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478010 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928476.992:66268): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928476.992:66269): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928477.007:66270): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928477.007:66271): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928477.009:66272): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478023 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928477.048:66273): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928477.048:66274): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928477.064:66275): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928477.064:66276): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928477.066:66277): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478042 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928477.116:66278): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928477.117:66279): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928477.134:66280): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928477.134:66281): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928477.136:66282): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478055 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928477.172:66283): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928477.172:66284): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928477.190:66285): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928477.190:66286): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928477.193:66287): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478069 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928477.273:66288): pid=478084 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928477.274:66289): pid=478084 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6975697469766C766B6962667476677576706B706B65616C79796B626A7A6D63203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383437362E393934343337372D36313037392D3236383833363535393934363937362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928477.275:66290): pid=478084 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928477.282:66291): pid=478084 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928477.625:66292): prog-id=2429 op=LOAD type=SYSCALL msg=audit(1764928477.625:66292): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd2dc9def0 a2=90 a3=9500000000 items=0 ppid=478101 pid=478102 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928477.625:66292): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616461613161323864373365383331653139636464643737356130663636 type=CRYPTO_KEY_USER msg=audit(1764928477.715:66293): pid=478008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=478009 suid=74 rport=28192 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928477.715:66294): pid=478008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478009 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928477.716:66295): pid=478008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928477.717:66296): pid=478008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928477.717:66297): pid=478008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928479.016:66298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928479.284:66299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928480.013:66300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928480.018:66301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928480.023:66302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928480.028:66303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928480.127:66304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928480.360:66305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928480.398:66306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928480.426:66307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928480.497:66308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928480.537:66309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928481.094:66310): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928481.220:66311): pid=478084 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928481.221:66312): pid=478084 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928481.227:66313): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928481.227:66314): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928481.241:66315): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928481.241:66316): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928481.243:66317): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478316 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928481.268:66318): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928481.268:66319): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928486.292:66320): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928486.292:66321): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928486.294:66322): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478330 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928486.325:66323): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928486.325:66324): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928486.339:66325): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928486.339:66326): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928486.340:66327): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478343 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928486.367:66328): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928486.367:66329): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928486.388:66330): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928486.388:66331): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928486.389:66332): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478362 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928486.433:66333): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928486.433:66334): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928486.447:66335): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928486.447:66336): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928486.448:66337): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478375 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928486.478:66338): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928486.478:66339): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928486.494:66340): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928486.494:66341): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928486.496:66342): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478389 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928486.577:66343): pid=478404 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928486.577:66344): pid=478404 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61726370776A67626D787962706761766571766569796D706278767279716B67203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383438362E3332383133392D36313037392D38323038383231303532343532362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928486.578:66345): pid=478404 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928486.583:66346): pid=478404 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928486.819:66347): prog-id=2430 op=LOAD type=SYSCALL msg=audit(1764928486.819:66347): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc7f4dd9b0 a2=90 a3=9500000000 items=0 ppid=478421 pid=478422 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928486.819:66347): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363837363463643363303232383664313932333034323339313338346533 type=USER_LOGIN msg=audit(1764928487.613:66348): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928487.613:66349): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928487.663:66350): pid=478444 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928487.663:66351): pid=478444 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928487.664:66352): pid=478444 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928487.667:66353): pid=478444 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928487.669:66354): pid=478444 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928487.669:66355): pid=478444 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928487.672:66356): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928487.672:66357): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928487.881:66358): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928488.016:66359): pid=478404 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928488.017:66360): pid=478404 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928488.021:66361): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928488.021:66362): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928488.036:66363): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928488.036:66364): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928488.037:66365): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478475 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928488.068:66366): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928488.069:66367): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928488.125:66368): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928488.125:66369): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928488.173:66370): pid=478489 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928488.173:66371): pid=478489 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928488.174:66372): pid=478489 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928488.178:66373): pid=478489 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928488.180:66374): pid=478489 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928488.180:66375): pid=478489 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928488.183:66376): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928488.184:66377): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928488.186:66378): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928488.186:66379): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928488.246:66380): pid=478504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928488.247:66381): pid=478504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928488.247:66382): pid=478504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928488.249:66383): pid=478504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928488.880:66384): pid=478504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928488.880:66385): pid=478504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928488.903:66386): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928488.903:66387): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764928492.010:66388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928492.177:66389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928493.097:66390): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928493.097:66391): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928493.098:66392): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478579 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928493.129:66393): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928493.129:66394): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928493.144:66395): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928493.144:66396): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928493.146:66397): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478592 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928493.183:66398): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928493.183:66399): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928493.201:66400): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928493.202:66401): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928493.203:66402): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478611 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928493.249:66403): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928493.249:66404): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928493.264:66405): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928493.264:66406): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928493.265:66407): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478624 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928493.298:66408): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928493.298:66409): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928493.312:66410): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928493.313:66411): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928493.314:66412): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478638 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928493.385:66413): pid=478653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928493.386:66414): pid=478653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716E73686C70686D7965626563756D6272666772696C61636364767066697874203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383439332E313331333134352D36313037392D3235303236383937353738393636312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928493.387:66415): pid=478653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928493.392:66416): pid=478653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928493.720:66417): prog-id=2431 op=LOAD type=SYSCALL msg=audit(1764928493.720:66417): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff4abb0250 a2=90 a3=9500000000 items=0 ppid=478670 pid=478671 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928493.720:66417): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663334613762666438636635306235366662343538343735363735393333 type=USER_LOGIN msg=audit(1764928494.047:66418): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.047:66419): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928494.111:66420): pid=478693 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928494.111:66421): pid=478693 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928494.113:66422): pid=478693 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928494.118:66423): pid=478693 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.122:66424): pid=478693 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928494.122:66425): pid=478693 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.128:66426): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928494.128:66427): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.132:66428): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.132:66429): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928494.157:66430): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1764928494.199:66431): pid=478710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928494.199:66432): pid=478710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928494.200:66433): pid=478710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928494.205:66434): pid=478710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.209:66435): pid=478710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928494.209:66436): pid=478710 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.213:66437): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928494.213:66438): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.217:66439): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.217:66440): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928494.270:66441): pid=478653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928494.270:66442): pid=478653 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928494.276:66443): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928494.276:66444): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1764928494.286:66445): pid=478738 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928494.286:66446): pid=478738 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928494.287:66447): pid=478738 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928494.290:66448): pid=478738 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.291:66449): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928494.291:66450): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928494.293:66451): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478753 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928494.294:66452): pid=478738 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928494.294:66453): pid=478738 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.298:66454): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928494.298:66455): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.316:66456): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.317:66457): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928494.329:66458): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928494.329:66459): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1764928494.381:66460): pid=478766 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928494.382:66461): pid=478766 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D306435376339663636633162 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928494.382:66462): pid=478766 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928494.386:66463): pid=478766 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.390:66464): pid=478766 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928494.390:66465): pid=478766 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.399:66466): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928494.400:66467): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.419:66468): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.420:66469): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.429:66470): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928494.429:66471): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928494.430:66472): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478786 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928494.458:66473): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928494.458:66474): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1764928494.474:66475): pid=478782 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928494.474:66476): pid=478782 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928494.475:66477): pid=478782 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.475:66478): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928494.475:66479): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928494.477:66480): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478809 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_START msg=audit(1764928494.478:66481): pid=478782 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.481:66482): pid=478782 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928494.482:66483): pid=478782 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.485:66484): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928494.485:66485): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.487:66486): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.487:66487): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928494.513:66488): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928494.514:66489): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928494.541:66490): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928494.541:66491): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928494.543:66492): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478842 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928494.547:66493): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928494.547:66494): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.554:66495): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.554:66496): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928494.590:66497): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928494.591:66498): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928494.608:66499): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928494.608:66500): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928494.610:66501): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478869 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928494.621:66502): pid=478848 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928494.622:66503): pid=478848 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928494.623:66504): pid=478848 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928494.626:66505): pid=478848 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.634:66506): pid=478848 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928494.634:66507): pid=478848 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.637:66508): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928494.637:66509): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.643:66510): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.643:66511): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928494.643:66512): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928494.643:66513): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928494.668:66514): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928494.668:66515): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928494.670:66516): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478897 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928494.708:66517): pid=478884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928494.708:66518): pid=478884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928494.709:66519): pid=478884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928494.712:66520): pid=478884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.715:66521): pid=478884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928494.716:66522): pid=478884 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.719:66523): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928494.719:66524): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.721:66525): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.721:66526): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928494.733:66527): pid=478913 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928494.734:66528): pid=478913 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A77716F696174797A767276667472666B69626D726470676F666164786E6B75203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383439342E3436303132372D36313131332D3231363435393731313636343834322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928494.735:66529): pid=478913 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928494.738:66530): pid=478913 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_ACCT msg=audit(1764928494.786:66531): pid=478916 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928494.786:66532): pid=478916 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928494.787:66533): pid=478916 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928494.789:66534): pid=478916 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.792:66535): pid=478916 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928494.792:66536): pid=478916 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.796:66537): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928494.797:66538): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.799:66539): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.799:66540): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928494.817:66541): pid=478940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928494.828:66542): pid=478932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=478940 suid=74 rport=42342 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928494.829:66543): pid=478932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=478940 suid=74 rport=42342 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ACCT msg=audit(1764928494.849:66544): pid=478933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928494.849:66545): pid=478933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928494.849:66546): pid=478933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928494.852:66547): pid=478933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.854:66548): pid=478933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928494.855:66549): pid=478933 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.859:66550): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928494.859:66551): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.863:66552): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.863:66553): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928494.925:66554): pid=478949 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928494.926:66555): pid=478949 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928494.927:66556): pid=478949 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928494.929:66557): pid=478949 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.932:66558): pid=478949 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928494.933:66559): pid=478949 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928494.936:66560): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928494.936:66561): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928494.942:66562): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928494.942:66563): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928494.988:66564): pid=478932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=478940 suid=74 rport=42342 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928494.988:66565): pid=478932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478940 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928494.990:66566): pid=478932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=192.227.128.3 addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928494.990:66567): pid=478932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=478932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928494.991:66568): pid=478932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764928495.011:66569): pid=478972 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928495.012:66570): pid=478972 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928495.013:66571): pid=478972 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928495.016:66572): pid=478972 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.020:66573): pid=478972 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928495.020:66574): pid=478972 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.025:66575): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928495.025:66576): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928495.028:66577): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928495.028:66578): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928495.073:66579): prog-id=2432 op=LOAD type=SYSCALL msg=audit(1764928495.073:66579): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe8ca385d0 a2=90 a3=9500000000 items=0 ppid=479006 pid=479007 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928495.073:66579): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646132383837303238663866333766363065326162643730343432383234 type=USER_ACCT msg=audit(1764928495.094:66580): pid=478992 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928495.095:66581): pid=478992 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D306435376339663636633162 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928495.096:66582): pid=478992 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928495.100:66583): pid=478992 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.103:66584): pid=478992 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928495.104:66585): pid=478992 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.107:66586): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928495.107:66587): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928495.109:66588): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928495.109:66589): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928495.169:66590): pid=479012 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928495.169:66591): pid=479012 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928495.171:66592): pid=479012 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928495.174:66593): pid=479012 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.177:66594): pid=479012 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928495.178:66595): pid=479012 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.184:66596): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928495.184:66597): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928495.195:66598): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928495.195:66599): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928495.266:66600): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928495.266:66601): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928495.273:66602): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928495.273:66603): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928495.332:66604): pid=479059 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928495.333:66605): pid=479059 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928495.334:66606): pid=479059 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928495.336:66607): pid=479059 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.342:66608): pid=479059 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928495.342:66609): pid=479059 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.347:66610): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928495.347:66611): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928495.353:66612): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928495.353:66613): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928495.405:66614): pid=479074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928495.406:66615): pid=479074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928495.406:66616): pid=479074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928495.409:66617): pid=479074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.411:66618): pid=479074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928495.412:66619): pid=479074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.415:66620): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928495.415:66621): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928495.418:66622): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928495.418:66623): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928495.496:66624): pid=479089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928495.496:66625): pid=479089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928495.497:66626): pid=479089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928495.500:66627): pid=479089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.504:66628): pid=479089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928495.504:66629): pid=479089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.508:66630): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928495.508:66631): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928495.575:66632): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1764928495.645:66633): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928495.645:66634): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928495.662:66635): pid=478913 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928495.662:66636): pid=478913 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928495.669:66637): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928495.669:66638): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1764928495.692:66639): pid=479120 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928495.692:66640): pid=479120 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928495.693:66641): pid=479120 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_LOGIN msg=audit(1764928495.693:66642): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928495.693:66643): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928495.695:66644): pid=479120 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928495.695:66645): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479134 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928495.697:66646): pid=479120 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928495.697:66647): pid=479120 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928495.700:66648): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928495.700:66649): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928495.718:66650): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928495.718:66651): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928495.908:66652): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928495.909:66653): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928495.910:66654): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479149 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928495.942:66655): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928495.942:66656): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928495.956:66657): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928495.956:66658): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928495.958:66659): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479162 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928495.994:66660): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928495.994:66661): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928496.014:66662): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928496.014:66663): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928496.016:66664): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479181 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928496.062:66665): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928496.062:66666): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928496.077:66667): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928496.077:66668): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928496.079:66669): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479194 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_LOGIN msg=audit(1764928496.112:66670): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928496.112:66671): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928496.113:66672): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928496.113:66673): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928496.128:66674): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928496.128:66675): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928496.130:66676): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479216 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928496.176:66677): pid=479208 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928496.176:66678): pid=479208 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928496.177:66679): pid=479208 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928496.179:66680): pid=479208 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928496.182:66681): pid=479208 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928496.182:66682): pid=479208 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928496.186:66683): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928496.186:66684): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928496.189:66685): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928496.189:66686): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928496.195:66687): pid=479237 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928496.195:66688): pid=479237 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E72666E75777A7061627A70756B6B736E62796F686E787A7A6E627A61766462203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383439352E393434313431342D36313132342D3134383739363739333234303532352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928496.196:66689): pid=479237 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928496.198:66690): pid=479237 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_ACCT msg=audit(1764928496.254:66691): pid=479240 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928496.255:66692): pid=479240 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928496.256:66693): pid=479240 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928496.259:66694): pid=479240 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=BPF msg=audit(1764928496.495:66695): prog-id=2433 op=LOAD type=SYSCALL msg=audit(1764928496.495:66695): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffbf4fede0 a2=90 a3=9500000000 items=0 ppid=479270 pid=479271 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928496.495:66695): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643435303562313235373739326435383765616362393864653763383435 type=BPF msg=audit(1764928496.770:66696): prog-id=2434 op=LOAD type=SYSCALL msg=audit(1764928496.770:66696): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd16614b80 a2=90 a3=9500000000 items=0 ppid=479326 pid=479327 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928496.770:66696): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346534313831643162356433336634633366646237653937303366643165 type=BPF msg=audit(1764928496.826:66697): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928496.955:66698): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928496.977:66699): pid=479240 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928496.977:66700): pid=479240 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928496.983:66701): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928496.983:66702): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928497.035:66703): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928497.035:66704): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928497.091:66705): pid=479237 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928497.091:66706): pid=479237 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928497.096:66707): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928497.096:66708): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1764928497.103:66709): pid=479363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928497.103:66710): pid=479363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928497.104:66711): pid=479363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928497.108:66712): pid=479363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_LOGIN msg=audit(1764928497.110:66713): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928497.110:66714): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928497.112:66715): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479378 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928497.112:66716): pid=479363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928497.113:66717): pid=479363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928497.117:66718): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928497.117:66719): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928497.120:66720): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928497.120:66721): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928497.143:66722): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928497.143:66723): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_ACCT msg=audit(1764928497.185:66724): pid=479383 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928497.185:66725): pid=479383 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928497.186:66726): pid=479383 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928497.189:66727): pid=479383 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_LOGIN msg=audit(1764928497.690:66728): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928497.690:66729): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928497.691:66730): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479438 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=BPF msg=audit(1764928497.715:66731): prog-id=2435 op=LOAD type=SYSCALL msg=audit(1764928497.715:66731): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd68fbe420 a2=90 a3=9500000000 items=0 ppid=479442 pid=479444 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928497.715:66731): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646466326166306562663266656136376262636430666230636633663861 type=USER_END msg=audit(1764928497.735:66732): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928497.735:66733): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928497.751:66734): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928497.751:66735): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928497.752:66736): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479462 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=BPF msg=audit(1764928497.763:66737): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928497.792:66738): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928497.792:66739): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928497.819:66740): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928497.819:66741): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928497.821:66742): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479490 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928497.870:66743): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928497.871:66744): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928497.891:66745): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928497.891:66746): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928497.893:66747): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479505 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928497.914:66748): pid=479383 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928497.915:66749): pid=479383 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928497.920:66750): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928497.920:66751): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_END msg=audit(1764928497.931:66752): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928497.931:66753): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928497.952:66754): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928497.952:66755): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928497.955:66756): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479519 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_LOGIN msg=audit(1764928497.968:66757): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928497.968:66758): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928498.017:66759): pid=479526 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928498.018:66760): pid=479526 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928498.019:66761): pid=479526 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_ACCT msg=audit(1764928498.019:66762): pid=479545 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928498.020:66763): pid=479545 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78636B6166666E746A646977676C6B6F71626F6C63746B736C6D6E667362676C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383439372E3733373234342D36313134332D3236383333393139343634323237372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928498.020:66764): pid=479545 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928498.023:66765): pid=479545 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928498.024:66766): pid=479526 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928498.026:66767): pid=479526 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928498.026:66768): pid=479526 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928498.029:66769): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928498.029:66770): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928498.030:66771): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928498.030:66772): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_ACCT msg=audit(1764928498.075:66773): pid=479552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928498.076:66774): pid=479552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928498.076:66775): pid=479552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928498.078:66776): pid=479552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=BPF msg=audit(1764928498.338:66777): prog-id=2436 op=LOAD type=SYSCALL msg=audit(1764928498.338:66777): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd5b6a3550 a2=90 a3=9500000000 items=0 ppid=479581 pid=479582 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928498.338:66777): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656539633233323062333231663434366263393762316538353338353539 type=BPF msg=audit(1764928498.638:66778): prog-id=2437 op=LOAD type=SYSCALL msg=audit(1764928498.638:66778): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe3210de20 a2=90 a3=9500000000 items=0 ppid=479636 pid=479637 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928498.638:66778): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323636623665623364323434646466663833373161323539306361656236 type=BPF msg=audit(1764928498.691:66779): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928498.835:66780): pid=479552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928498.836:66781): pid=479552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928498.842:66782): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928498.842:66783): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928498.915:66784): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928499.005:66785): pid=479545 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928499.006:66786): pid=479545 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928499.011:66787): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928499.011:66788): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928499.025:66789): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928499.025:66790): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928499.026:66791): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479674 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928499.057:66792): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928499.058:66793): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928499.175:66794): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928499.175:66795): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928499.177:66796): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479688 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928499.209:66797): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928499.209:66798): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928499.222:66799): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928499.222:66800): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928499.224:66801): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479701 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928499.255:66802): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928499.255:66803): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928499.275:66804): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928499.275:66805): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928499.276:66806): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479720 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928499.314:66807): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928499.314:66808): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928499.327:66809): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928499.328:66810): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928499.329:66811): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479733 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928499.353:66812): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928499.353:66813): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928499.367:66814): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928499.367:66815): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928499.369:66816): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479747 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928499.423:66817): pid=479762 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928499.423:66818): pid=479762 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A676770656F61766469676E67657A6F756D626E706B666C6C667275626F6963203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383439392E323130373734322D36313135342D36333533383839393630353830352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928499.424:66819): pid=479762 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928499.427:66820): pid=479762 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928499.663:66821): prog-id=2438 op=LOAD type=SYSCALL msg=audit(1764928499.663:66821): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffbac79400 a2=90 a3=9500000000 items=0 ppid=479779 pid=479780 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928499.663:66821): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326637353365363863353632336336383335616263643531316138306238 type=BPF msg=audit(1764928500.149:66822): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928500.287:66823): pid=479762 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928500.287:66824): pid=479762 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928500.292:66825): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928500.292:66826): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928500.319:66827): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928500.319:66828): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928500.321:66829): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479819 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928500.351:66830): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928500.351:66831): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928500.721:66832): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928500.722:66833): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928500.723:66834): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479833 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928500.749:66835): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928500.749:66836): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928500.762:66837): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928500.762:66838): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928500.764:66839): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479846 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928500.797:66840): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928500.797:66841): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928500.824:66842): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928500.824:66843): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928500.827:66844): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479865 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928500.878:66845): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928500.878:66846): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928500.898:66847): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928500.898:66848): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928500.900:66849): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479878 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928500.935:66850): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928500.935:66851): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928500.954:66852): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928500.954:66853): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928500.956:66854): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479892 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928501.023:66855): pid=479907 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928501.023:66856): pid=479907 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76616269786A76787777677A7961726C6A6664687A6D7977696768707078746C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383530302E373531303338382D36313137332D3136343732353834363034313337392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928501.024:66857): pid=479907 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928501.030:66858): pid=479907 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928501.362:66859): prog-id=2439 op=LOAD type=SYSCALL msg=audit(1764928501.362:66859): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe9f38a730 a2=90 a3=9500000000 items=0 ppid=479924 pid=479925 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928501.362:66859): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633730386663646132343938346538333938663161326337346436613233 type=CRYPTO_KEY_USER msg=audit(1764928501.967:66860): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29558 suid=1002 rport=51088 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928501.967:66861): pid=29536 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29539 suid=1002 rport=51086 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928501.967:66862): pid=29462 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29465 suid=1002 rport=51060 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928501.967:66863): pid=29481 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29484 suid=1002 rport=51070 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928501.967:66864): pid=29500 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29503 suid=1002 rport=51072 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928501.967:66865): pid=29519 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29522 suid=1002 rport=51084 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928501.967:66866): pid=29424 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29427 suid=1002 rport=51030 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928501.968:66867): pid=29405 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29408 suid=1002 rport=51026 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928501.971:66868): pid=29386 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29389 suid=1002 rport=51018 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928501.972:66869): pid=29443 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29446 suid=1002 rport=51044 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928501.972:66870): pid=29346 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29369 suid=1002 rport=50992 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928501.973:66871): pid=29363 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29370 suid=1002 rport=51006 laddr=172.18.0.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=BPF msg=audit(1764928501.974:66872): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928501.977:66873): pid=29481 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928501.977:66874): pid=29386 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928501.977:66875): pid=29519 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928501.977:66876): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.977:66877): pid=29481 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928501.977:66878): pid=29500 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.977:66879): pid=29386 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.977:66880): pid=29555 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928501.977:66881): pid=29346 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.978:66882): pid=29519 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.978:66883): pid=29500 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.978:66884): pid=29346 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928501.979:66885): pid=29443 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.979:66886): pid=29443 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928501.979:66887): pid=29424 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928501.984:66888): pid=29363 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928501.984:66889): pid=29405 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.985:66890): pid=29405 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.985:66891): pid=29363 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928501.987:66892): pid=29536 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.987:66893): pid=29536 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928501.987:66894): pid=29462 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.988:66895): pid=29424 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928501.988:66896): pid=29462 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928502.108:66897): pid=479907 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928502.108:66898): pid=479907 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928502.113:66899): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928502.113:66900): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928502.130:66901): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928502.130:66902): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928502.133:66903): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=479988 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928502.167:66904): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928502.167:66905): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928502.267:66906): pid=480003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928502.269:66907): pid=480002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=480003 suid=74 rport=42164 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928502.269:66908): pid=480002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=480003 suid=74 rport=42164 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1764928502.303:66909): pid=480002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928502.303:66910): pid=480002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ab:a5:71:0b:a0:cf:50:d1:52:d2:c5:70:29:31:e0:c6:ce:23:5f:35:1e:11:48:fd:2d:c9:5f:fe:01:2a:94:b7 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764928502.331:66911): pid=480002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928502.331:66912): pid=480002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=480003 suid=74 rport=42164 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1764928502.333:66913): pid=480002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764928502.333:66914): pid=480002 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=247 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin" type=SYSCALL msg=audit(1764928502.333:66914): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc3bb92c00 a2=4 a3=3ea items=0 ppid=410121 pid=480002 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=247 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928502.333:66914): proctitle=737368643A20636570682D61646D696E205B707269765D type=USER_ROLE_CHANGE msg=audit(1764928502.334:66915): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_START msg=audit(1764928502.371:66916): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928502.372:66917): pid=480005 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480005 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root" type=CRED_ACQ msg=audit(1764928502.374:66918): pid=480005 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_LOGIN msg=audit(1764928502.417:66919): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928502.417:66920): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928502.418:66921): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480006 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928502.473:66922): pid=480006 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928502.474:66923): pid=480006 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928502.475:66924): pid=480006 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928502.480:66925): pid=480006 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928502.483:66926): pid=480006 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928502.483:66927): pid=480006 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928502.486:66928): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928502.486:66929): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928502.488:66930): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928502.488:66931): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928502.489:66932): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480021 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928502.545:66933): pid=480021 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928502.545:66934): pid=480021 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928502.546:66935): pid=480021 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928502.549:66936): pid=480021 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=SERVICE_START msg=audit(1764928503.274:66937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928503.454:66938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928504.106:66939): pid=480021 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928504.107:66940): pid=480021 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928504.122:66941): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928504.122:66942): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928504.233:66943): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928504.233:66944): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928504.234:66945): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480198 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928504.299:66946): pid=480198 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928504.300:66947): pid=480198 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928504.300:66948): pid=480198 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928504.308:66949): pid=480198 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928504.311:66950): pid=480198 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928504.311:66951): pid=480198 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928504.314:66952): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928504.315:66953): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928504.317:66954): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928504.317:66955): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928504.318:66956): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480213 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928504.379:66957): pid=480213 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928504.379:66958): pid=480213 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928504.380:66959): pid=480213 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928504.384:66960): pid=480213 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928505.088:66961): pid=480213 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928505.089:66962): pid=480213 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928505.182:66963): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928505.182:66964): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928505.190:66965): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928505.190:66966): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928505.191:66967): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480260 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928505.243:66968): pid=480260 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928505.243:66969): pid=480260 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928505.244:66970): pid=480260 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928505.247:66971): pid=480260 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928505.249:66972): pid=480260 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928505.249:66973): pid=480260 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928505.253:66974): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928505.253:66975): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928505.254:66976): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928505.254:66977): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928505.256:66978): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480275 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928505.316:66979): pid=480275 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928505.317:66980): pid=480275 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928505.317:66981): pid=480275 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928505.320:66982): pid=480275 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928505.707:66983): pid=480275 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928505.707:66984): pid=480275 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928505.711:66985): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928505.711:66986): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928505.917:66987): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928505.917:66988): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928505.918:66989): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480310 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928505.972:66990): pid=480310 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928505.972:66991): pid=480310 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928505.972:66992): pid=480310 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928505.975:66993): pid=480310 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928505.977:66994): pid=480310 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928505.977:66995): pid=480310 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928505.983:66996): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928505.983:66997): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928505.989:66998): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928505.990:66999): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928505.991:67000): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480325 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.053:67001): pid=480325 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.053:67002): pid=480325 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.054:67003): pid=480325 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.057:67004): pid=480325 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.061:67005): pid=480325 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928506.061:67006): pid=480325 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.064:67007): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.064:67008): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.067:67009): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.067:67010): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.068:67011): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480340 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.134:67012): pid=480340 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.135:67013): pid=480340 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.136:67014): pid=480340 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.138:67015): pid=480340 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.142:67016): pid=480340 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928506.142:67017): pid=480340 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.146:67018): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.146:67019): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.148:67020): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.148:67021): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.150:67022): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480355 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.211:67023): pid=480355 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.212:67024): pid=480355 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D306435376339663636633162 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.212:67025): pid=480355 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.215:67026): pid=480355 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.219:67027): pid=480355 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928506.220:67028): pid=480355 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.224:67029): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.224:67030): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.231:67031): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.231:67032): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.232:67033): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480370 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.292:67034): pid=480370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.293:67035): pid=480370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.293:67036): pid=480370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.297:67037): pid=480370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.300:67038): pid=480370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928506.301:67039): pid=480370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.306:67040): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.307:67041): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.317:67042): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.317:67043): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.319:67044): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480385 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_END msg=audit(1764928506.376:67045): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.376:67046): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.378:67047): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.378:67048): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.379:67049): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480398 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.440:67050): pid=480398 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.440:67051): pid=480398 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.441:67052): pid=480398 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.443:67053): pid=480398 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.448:67054): pid=480398 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928506.449:67055): pid=480398 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.452:67056): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.452:67057): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.456:67058): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.456:67059): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.458:67060): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480413 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.515:67061): pid=480413 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.516:67062): pid=480413 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.516:67063): pid=480413 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.518:67064): pid=480413 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.521:67065): pid=480413 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928506.521:67066): pid=480413 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.525:67067): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.525:67068): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.526:67069): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.526:67070): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.528:67071): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480428 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.589:67072): pid=480428 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.589:67073): pid=480428 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.590:67074): pid=480428 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.592:67075): pid=480428 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.596:67076): pid=480428 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928506.596:67077): pid=480428 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.600:67078): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.600:67079): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.605:67080): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.605:67081): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.606:67082): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480443 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.664:67083): pid=480443 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.664:67084): pid=480443 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.665:67085): pid=480443 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.667:67086): pid=480443 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.671:67087): pid=480443 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928506.671:67088): pid=480443 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.676:67089): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.676:67090): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.682:67091): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.682:67092): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.684:67093): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480458 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.744:67094): pid=480458 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.744:67095): pid=480458 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.745:67096): pid=480458 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.748:67097): pid=480458 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.751:67098): pid=480458 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928506.752:67099): pid=480458 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.756:67100): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.756:67101): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.762:67102): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.762:67103): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.764:67104): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480473 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.826:67105): pid=480473 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.827:67106): pid=480473 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.827:67107): pid=480473 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.830:67108): pid=480473 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.833:67109): pid=480473 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928506.833:67110): pid=480473 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.836:67111): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.836:67112): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.838:67113): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.838:67114): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.840:67115): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480488 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.906:67116): pid=480488 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.906:67117): pid=480488 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D306435376339663636633162 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.907:67118): pid=480488 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.910:67119): pid=480488 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.913:67120): pid=480488 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928506.914:67121): pid=480488 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928506.919:67122): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928506.919:67123): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928506.925:67124): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928506.925:67125): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928506.927:67126): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480503 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928506.993:67127): pid=480503 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928506.994:67128): pid=480503 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928506.995:67129): pid=480503 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928506.997:67130): pid=480503 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.001:67131): pid=480503 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928507.001:67132): pid=480503 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.004:67133): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.005:67134): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.006:67135): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.007:67136): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.009:67137): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480518 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_END msg=audit(1764928507.067:67138): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.067:67139): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.069:67140): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.069:67141): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.071:67142): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480531 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928507.129:67143): pid=480531 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928507.130:67144): pid=480531 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928507.130:67145): pid=480531 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928507.134:67146): pid=480531 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.139:67147): pid=480531 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928507.140:67148): pid=480531 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.144:67149): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.144:67150): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.150:67151): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.150:67152): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.152:67153): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480546 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928507.207:67154): pid=480546 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928507.207:67155): pid=480546 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928507.208:67156): pid=480546 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928507.210:67157): pid=480546 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.213:67158): pid=480546 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928507.213:67159): pid=480546 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.223:67160): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.223:67161): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.229:67162): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.229:67163): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.230:67164): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480561 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928507.285:67165): pid=480561 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928507.285:67166): pid=480561 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928507.286:67167): pid=480561 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928507.289:67168): pid=480561 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.293:67169): pid=480561 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928507.293:67170): pid=480561 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.300:67171): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.300:67172): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.318:67173): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.318:67174): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.320:67175): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480576 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928507.390:67176): pid=480576 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928507.391:67177): pid=480576 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928507.391:67178): pid=480576 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928507.394:67179): pid=480576 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.397:67180): pid=480576 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928507.397:67181): pid=480576 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.405:67182): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.406:67183): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.410:67184): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.410:67185): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.412:67186): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480591 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928507.478:67187): pid=480591 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928507.478:67188): pid=480591 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928507.479:67189): pid=480591 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928507.482:67190): pid=480591 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.485:67191): pid=480591 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928507.485:67192): pid=480591 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.489:67193): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.489:67194): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.494:67195): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.494:67196): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.496:67197): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480606 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928507.560:67198): pid=480606 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928507.560:67199): pid=480606 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928507.561:67200): pid=480606 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928507.564:67201): pid=480606 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.567:67202): pid=480606 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928507.567:67203): pid=480606 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.571:67204): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.571:67205): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.575:67206): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.575:67207): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.577:67208): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480621 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928507.649:67209): pid=480621 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928507.649:67210): pid=480621 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D306435376339663636633162 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928507.654:67211): pid=480621 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928507.658:67212): pid=480621 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.662:67213): pid=480621 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928507.662:67214): pid=480621 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.668:67215): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.668:67216): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.674:67217): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.674:67218): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.676:67219): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480636 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928507.733:67220): pid=480636 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928507.734:67221): pid=480636 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928507.734:67222): pid=480636 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928507.737:67223): pid=480636 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.740:67224): pid=480636 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928507.740:67225): pid=480636 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.745:67226): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.745:67227): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.750:67228): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.751:67229): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.752:67230): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480651 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_END msg=audit(1764928507.797:67231): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.798:67232): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.800:67233): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.800:67234): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.801:67235): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480664 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928507.855:67236): pid=480664 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928507.856:67237): pid=480664 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928507.856:67238): pid=480664 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928507.859:67239): pid=480664 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.864:67240): pid=480664 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928507.864:67241): pid=480664 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.868:67242): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.868:67243): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.872:67244): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.872:67245): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.874:67246): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480679 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928507.940:67247): pid=480679 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928507.940:67248): pid=480679 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928507.941:67249): pid=480679 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928507.944:67250): pid=480679 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.947:67251): pid=480679 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928507.948:67252): pid=480679 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928507.955:67253): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928507.955:67254): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928507.973:67255): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928507.973:67256): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928507.975:67257): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480694 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928508.033:67258): pid=480694 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928508.034:67259): pid=480694 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928508.034:67260): pid=480694 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928508.037:67261): pid=480694 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.040:67262): pid=480694 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928508.040:67263): pid=480694 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.045:67264): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928508.045:67265): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928508.059:67266): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928508.059:67267): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928508.061:67268): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480709 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928508.122:67269): pid=480709 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928508.122:67270): pid=480709 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928508.123:67271): pid=480709 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928508.126:67272): pid=480709 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.129:67273): pid=480709 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928508.129:67274): pid=480709 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.136:67275): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928508.137:67276): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928508.145:67277): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928508.145:67278): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928508.147:67279): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480724 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928508.205:67280): pid=480724 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928508.205:67281): pid=480724 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928508.206:67282): pid=480724 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928508.208:67283): pid=480724 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.211:67284): pid=480724 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928508.211:67285): pid=480724 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.215:67286): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928508.215:67287): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928508.217:67288): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928508.217:67289): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928508.218:67290): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480739 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928508.286:67291): pid=480739 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928508.286:67292): pid=480739 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928508.287:67293): pid=480739 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928508.290:67294): pid=480739 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.293:67295): pid=480739 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928508.293:67296): pid=480739 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.298:67297): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928508.298:67298): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928508.305:67299): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928508.305:67300): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928508.307:67301): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480754 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928508.372:67302): pid=480754 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928508.372:67303): pid=480754 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D306435376339663636633162 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928508.373:67304): pid=480754 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928508.376:67305): pid=480754 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.380:67306): pid=480754 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928508.380:67307): pid=480754 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.385:67308): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928508.386:67309): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928508.393:67310): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928508.393:67311): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928508.395:67312): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480769 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928508.451:67313): pid=480769 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928508.451:67314): pid=480769 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928508.451:67315): pid=480769 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928508.453:67316): pid=480769 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.456:67317): pid=480769 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928508.458:67318): pid=480769 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.462:67319): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928508.462:67320): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928508.466:67321): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928508.466:67322): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928508.467:67323): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480784 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_END msg=audit(1764928508.521:67324): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928508.521:67325): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928508.528:67326): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928508.528:67327): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928508.530:67328): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480797 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928508.594:67329): pid=480797 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928508.594:67330): pid=480797 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928508.595:67331): pid=480797 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928508.597:67332): pid=480797 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.602:67333): pid=480797 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928508.602:67334): pid=480797 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.608:67335): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928508.608:67336): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928508.611:67337): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928508.611:67338): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928508.612:67339): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480812 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928508.670:67340): pid=480812 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928508.671:67341): pid=480812 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928508.671:67342): pid=480812 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928508.674:67343): pid=480812 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.677:67344): pid=480812 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928508.677:67345): pid=480812 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.682:67346): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928508.682:67347): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928508.685:67348): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928508.685:67349): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928508.687:67350): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480827 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928508.747:67351): pid=480827 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928508.747:67352): pid=480827 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D37396665646462312D346266632D353537662D383362392D3064353763396636366331622F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928508.748:67353): pid=480827 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928508.750:67354): pid=480827 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.754:67355): pid=480827 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928508.754:67356): pid=480827 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.759:67357): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928508.759:67358): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928508.902:67359): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928508.902:67360): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928508.903:67361): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480842 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928508.967:67362): pid=480842 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928508.967:67363): pid=480842 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928508.968:67364): pid=480842 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928508.972:67365): pid=480842 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.975:67366): pid=480842 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928508.976:67367): pid=480842 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928508.981:67368): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928508.981:67369): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1764928510.014:67370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928510.274:67371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928511.018:67372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928511.021:67373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928511.026:67374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928511.031:67375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928511.036:67376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928511.409:67377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928511.454:67378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928511.482:67379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928511.540:67380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928511.588:67381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928512.271:67382): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928512.272:67383): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928512.274:67384): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481028 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928512.310:67385): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928512.310:67386): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928512.328:67387): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928512.328:67388): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928512.329:67389): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481041 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928512.368:67390): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928512.369:67391): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928512.393:67392): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928512.394:67393): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928512.395:67394): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481060 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928512.437:67395): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928512.438:67396): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928512.603:67397): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928512.604:67398): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928512.605:67399): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481073 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928512.652:67400): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928512.652:67401): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928512.671:67402): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928512.671:67403): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928512.672:67404): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481086 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928512.706:67405): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928512.706:67406): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928512.722:67407): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928512.722:67408): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928512.725:67409): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481100 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928512.794:67410): pid=481115 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928512.795:67411): pid=481115 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928512.797:67412): pid=481115 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928512.802:67413): pid=481115 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928512.986:67414): pid=481115 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928512.986:67415): pid=481115 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928512.991:67416): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928512.991:67417): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1764928513.260:67418): prog-id=2440 op=LOAD type=SYSCALL msg=audit(1764928513.260:67418): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcc6badda0 a2=90 a3=9500000000 items=0 ppid=481137 pid=481138 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928513.260:67418): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623163623832393535663261336564366266366632386236653630373933 type=BPF msg=audit(1764928513.734:67419): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1764928514.010:67420): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928514.011:67421): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928514.013:67422): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481177 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928514.045:67423): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928514.045:67424): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928514.059:67425): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928514.059:67426): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928514.061:67427): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481190 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928514.094:67428): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928514.094:67429): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928514.108:67430): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928514.109:67431): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928514.110:67432): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481203 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928514.149:67433): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928514.149:67434): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928514.308:67435): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928514.308:67436): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928514.309:67437): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481222 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928514.350:67438): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928514.350:67439): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928514.363:67440): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928514.363:67441): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928514.365:67442): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481235 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928514.400:67443): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928514.400:67444): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928514.416:67445): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928514.416:67446): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928514.418:67447): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481249 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928514.491:67448): pid=481264 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928514.493:67449): pid=481264 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7362707A62716C7A70756C6D6871647A6B687267746E616D656D7878786C6679203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383531342E3039363239392D36313138352D3137373233373235393730373333382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928514.494:67450): pid=481264 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928514.500:67451): pid=481264 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928514.674:67452): pid=481264 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928514.675:67453): pid=481264 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928514.678:67454): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928514.679:67455): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928514.693:67456): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928514.694:67457): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928514.695:67458): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481267 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928514.726:67459): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928514.726:67460): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928514.745:67461): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928514.745:67462): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928514.747:67463): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481280 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928514.796:67464): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928514.797:67465): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928514.816:67466): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928514.816:67467): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928514.817:67468): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481293 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928514.848:67469): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928514.848:67470): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928514.864:67471): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928514.864:67472): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928514.866:67473): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481307 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928514.933:67474): pid=481322 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928514.934:67475): pid=481322 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6278716773726F6D757A72647A67756C696C796E6E79706C647A766368626A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383531342E3039363239392D36313138352D3137373233373235393730373333382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928514.934:67476): pid=481322 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928514.937:67477): pid=481322 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928515.100:67478): pid=481322 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928515.101:67479): pid=481322 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928515.106:67480): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928515.106:67481): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928515.129:67482): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928515.129:67483): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928515.131:67484): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481325 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928515.166:67485): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928515.166:67486): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928515.478:67487): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928515.479:67488): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928515.480:67489): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481339 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928515.514:67490): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928515.514:67491): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928515.527:67492): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928515.527:67493): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928515.528:67494): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481352 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928515.564:67495): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928515.564:67496): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928515.584:67497): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928515.584:67498): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928515.586:67499): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481371 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928515.630:67500): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928515.630:67501): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928515.648:67502): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928515.649:67503): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928515.650:67504): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481393 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928515.682:67505): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928515.682:67506): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928515.699:67507): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928515.699:67508): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928515.701:67509): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481412 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928515.761:67510): pid=481429 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928515.761:67511): pid=481429 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617562617472776B6A6862766B726D677A6473676E6176727566796B74657966203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383531352E353136303531382D36313231382D3231303131323638393435333531382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928515.762:67512): pid=481429 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928515.765:67513): pid=481429 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928516.084:67514): prog-id=2441 op=LOAD type=SYSCALL msg=audit(1764928516.084:67514): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff2c9f7460 a2=90 a3=9500000000 items=0 ppid=481463 pid=481464 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928516.084:67514): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666239326533633466653366353165663134646433316461616433323262 type=BPF msg=audit(1764928516.530:67515): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928516.623:67516): pid=481429 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928516.624:67517): pid=481429 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928516.629:67518): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928516.629:67519): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928516.643:67520): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928516.644:67521): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928516.645:67522): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481504 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928516.681:67523): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928516.681:67524): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928516.777:67525): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928516.777:67526): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928516.779:67527): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481518 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928516.806:67528): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928516.806:67529): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928516.819:67530): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928516.819:67531): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928516.821:67532): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481531 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928516.854:67533): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928516.854:67534): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928516.875:67535): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928516.875:67536): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928516.877:67537): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481550 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928516.916:67538): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928516.916:67539): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928516.933:67540): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928516.933:67541): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928516.934:67542): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481563 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928516.959:67543): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928516.959:67544): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928516.976:67545): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928516.978:67546): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928516.979:67547): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481577 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928517.033:67548): pid=481592 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928517.033:67549): pid=481592 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77706F6577736664676569746B6D75766665686C746473657463746E7A6A756C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383531362E383037383933352D36313232372D3130323337363932313338303835392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928517.035:67550): pid=481592 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928517.038:67551): pid=481592 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928517.323:67552): prog-id=2442 op=LOAD type=SYSCALL msg=audit(1764928517.323:67552): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffce6754d70 a2=90 a3=9500000000 items=0 ppid=481610 pid=481611 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928517.323:67552): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333063366166326439663364373761303932643530336664363165353337 type=USER_LOGIN msg=audit(1764928517.751:67553): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928517.751:67554): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928517.753:67555): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481634 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928517.820:67556): pid=481634 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928517.820:67557): pid=481634 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928517.821:67558): pid=481634 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928517.826:67559): pid=481634 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928517.828:67560): pid=481634 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928517.828:67561): pid=481634 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928517.837:67562): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928517.837:67563): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928517.840:67564): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928517.840:67565): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928517.842:67566): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481650 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928517.893:67567): pid=481650 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928517.894:67568): pid=481650 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F75742038393520726D2D6461656D6F6E202D2D667369642037396665646462312D346266632D353537662D383362392D306435376339663636633162202D2D6E616D65206D6F6E2E6E7030303035353436343135202D2D666F726365 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928517.895:67569): pid=481650 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928517.898:67570): pid=481650 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=BPF msg=audit(1764928517.924:67571): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1764928518.999:67572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-79feddb1-4bfc-557f-83b9-0d57c9f66c1b@mon.np0005546415 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928519.378:67573): prog-id=2443 op=LOAD type=BPF msg=audit(1764928519.378:67574): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928519.378:67575): prog-id=2444 op=LOAD type=BPF msg=audit(1764928519.378:67576): prog-id=2445 op=LOAD type=BPF msg=audit(1764928519.378:67577): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928519.378:67578): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928519.381:67579): prog-id=2446 op=LOAD type=BPF msg=audit(1764928519.381:67580): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928519.381:67581): prog-id=2447 op=LOAD type=BPF msg=audit(1764928519.381:67582): prog-id=2448 op=LOAD type=BPF msg=audit(1764928519.381:67583): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928519.381:67584): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928519.390:67585): prog-id=2449 op=LOAD type=BPF msg=audit(1764928519.390:67586): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928519.390:67587): prog-id=2450 op=LOAD type=BPF msg=audit(1764928519.390:67588): prog-id=2451 op=LOAD type=BPF msg=audit(1764928519.390:67589): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928519.390:67590): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928519.391:67591): prog-id=2452 op=LOAD type=BPF msg=audit(1764928519.391:67592): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928519.441:67593): pid=481650 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928519.441:67594): pid=481650 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928522.899:67595): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928522.899:67596): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=BPF msg=audit(1764928522.948:67597): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1764928522.949:67598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928523.080:67599): pid=481592 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928523.081:67600): pid=481592 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928523.085:67601): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928523.085:67602): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928523.100:67603): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928523.100:67604): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928523.102:67605): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481841 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928523.133:67606): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928523.133:67607): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928523.205:67608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928523.336:67609): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928523.336:67610): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928523.338:67611): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481868 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928523.366:67612): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928523.367:67613): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928523.378:67614): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928523.379:67615): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928523.381:67616): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481881 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928523.422:67617): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928523.422:67618): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928523.448:67619): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928523.448:67620): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928523.449:67621): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481900 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928523.498:67622): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928523.498:67623): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928523.512:67624): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928523.512:67625): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928523.514:67626): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481913 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928523.545:67627): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928523.546:67628): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928523.562:67629): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928523.562:67630): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928523.564:67631): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=481927 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928523.626:67632): pid=481942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928523.626:67633): pid=481942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766678796F6670796674756E616C65756674757069767770657166786B736E73203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383532332E333639343835342D36313234322D31373639333635333231373338342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928523.627:67634): pid=481942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928523.632:67635): pid=481942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928523.946:67636): prog-id=2453 op=LOAD type=SYSCALL msg=audit(1764928523.946:67636): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffee4de2680 a2=90 a3=9500000000 items=0 ppid=481959 pid=481960 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928523.946:67636): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663931393535646134316661626364666138663836613132323966353161 type=BPF msg=audit(1764928525.765:67637): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928525.880:67638): pid=481942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928525.881:67639): pid=481942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928525.887:67640): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928525.887:67641): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928525.900:67642): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928525.900:67643): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928525.903:67644): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482000 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928525.938:67645): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928525.938:67646): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928525.964:67647): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928525.964:67648): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928525.965:67649): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482014 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928525.995:67650): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928525.995:67651): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928526.007:67652): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928526.007:67653): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928526.009:67654): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482027 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928526.045:67655): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928526.045:67656): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928526.064:67657): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928526.064:67658): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928526.065:67659): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482046 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928526.119:67660): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928526.119:67661): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928526.133:67662): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928526.133:67663): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928526.134:67664): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482059 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928526.165:67665): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928526.165:67666): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928526.181:67667): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928526.181:67668): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928526.182:67669): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482073 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928526.242:67670): pid=482088 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928526.243:67671): pid=482088 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65756768747177656A79677564747A79727677666D70786A677262727A646175203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383532352E393937343535382D36313234322D3137373732353131313139313135362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928526.245:67672): pid=482088 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928526.250:67673): pid=482088 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928526.555:67674): prog-id=2454 op=LOAD type=SYSCALL msg=audit(1764928526.555:67674): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe2ff68e10 a2=90 a3=9500000000 items=0 ppid=482105 pid=482106 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928526.555:67674): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633135343738323133393030643465616362636434383037366337396336 type=BPF msg=audit(1764928527.104:67675): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928527.229:67676): pid=482088 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928527.229:67677): pid=482088 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928527.234:67678): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928527.234:67679): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928527.246:67680): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928527.246:67681): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928527.248:67682): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482144 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928527.277:67683): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928527.277:67684): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928527.312:67685): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928527.312:67686): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928527.314:67687): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482158 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928527.342:67688): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928527.342:67689): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928527.356:67690): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928527.356:67691): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928527.358:67692): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482171 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928527.394:67693): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928527.394:67694): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928527.411:67695): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928527.411:67696): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928527.412:67697): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482190 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928527.455:67698): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928527.455:67699): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928527.473:67700): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928527.474:67701): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928527.475:67702): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482203 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928527.513:67703): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928527.513:67704): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928527.532:67705): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928527.532:67706): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928527.534:67707): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482217 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928527.593:67708): pid=482232 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928527.594:67709): pid=482232 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6A6D7A757578746B77656D6F646D7764727A6668666A716377626C74746B64203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383532372E333434323634372D36313234322D3233343430363331323332323139322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928527.595:67710): pid=482232 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928527.600:67711): pid=482232 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928527.981:67712): prog-id=2455 op=LOAD type=SYSCALL msg=audit(1764928527.981:67712): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd966f4d20 a2=90 a3=9500000000 items=0 ppid=482250 pid=482251 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928527.981:67712): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343136323437636363613233386363613562393564333465393136306565 type=BPF msg=audit(1764928528.483:67713): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928528.586:67714): pid=482232 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928528.587:67715): pid=482232 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928528.592:67716): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928528.592:67717): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928528.606:67718): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928528.606:67719): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928528.608:67720): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482287 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928528.641:67721): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928528.642:67722): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928534.012:67723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928534.148:67724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928536.145:67725): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928536.145:67726): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928536.147:67727): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482319 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928536.210:67728): pid=482319 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928536.210:67729): pid=482319 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928536.211:67730): pid=482319 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928536.216:67731): pid=482319 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928536.219:67732): pid=482319 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928536.220:67733): pid=482319 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928536.224:67734): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928536.224:67735): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928536.227:67736): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928536.227:67737): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928536.228:67738): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482334 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928536.289:67739): pid=482334 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928536.290:67740): pid=482334 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928536.291:67741): pid=482334 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928536.294:67742): pid=482334 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928536.741:67743): pid=482334 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928536.742:67744): pid=482334 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928536.747:67745): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928536.747:67746): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928536.782:67747): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928536.782:67748): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928536.783:67749): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482370 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928536.837:67750): pid=482370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928536.837:67751): pid=482370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928536.838:67752): pid=482370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928536.841:67753): pid=482370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928536.844:67754): pid=482370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928536.845:67755): pid=482370 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928536.848:67756): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928536.848:67757): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928536.850:67758): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928536.850:67759): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928536.851:67760): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482385 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928536.912:67761): pid=482385 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928536.912:67762): pid=482385 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928536.912:67763): pid=482385 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928536.915:67764): pid=482385 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928538.021:67765): pid=482515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_END msg=audit(1764928538.124:67766): pid=482385 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928538.125:67767): pid=482385 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928538.131:67768): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928538.131:67769): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928538.191:67770): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928538.191:67771): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928538.193:67772): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482523 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928538.248:67773): pid=482523 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928538.248:67774): pid=482523 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=726D202D66202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928538.249:67775): pid=482523 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928538.254:67776): pid=482523 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928538.257:67777): pid=482523 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928538.258:67778): pid=482523 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928538.263:67779): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928538.263:67780): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928538.267:67781): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928538.267:67782): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928538.269:67783): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482538 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_SESSION msg=audit(1764928538.272:67784): pid=482509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=482515 suid=74 rport=47532 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928538.272:67785): pid=482509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=482515 suid=74 rport=47532 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ACCT msg=audit(1764928538.316:67786): pid=482538 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928538.316:67787): pid=482538 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=726D202D66202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928538.316:67788): pid=482538 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928538.319:67789): pid=482538 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928538.321:67790): pid=482538 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928538.322:67791): pid=482538 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928538.327:67792): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928538.327:67793): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928538.332:67794): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928538.332:67795): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928538.333:67796): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482553 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928538.390:67797): pid=482553 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928538.390:67798): pid=482553 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=726D202D66202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928538.391:67799): pid=482553 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928538.394:67800): pid=482553 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928538.397:67801): pid=482553 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928538.397:67802): pid=482553 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928538.402:67803): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928538.402:67804): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928538.778:67805): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928538.779:67806): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928538.780:67807): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482568 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928538.807:67808): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928538.807:67809): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928538.823:67810): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928538.823:67811): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928538.824:67812): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482581 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928538.857:67813): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928538.858:67814): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928538.878:67815): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928538.878:67816): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928538.879:67817): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482600 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928538.919:67818): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928538.919:67819): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928538.937:67820): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928538.937:67821): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928538.939:67822): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482613 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928538.965:67823): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928538.965:67824): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928538.987:67825): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928538.987:67826): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928538.989:67827): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482627 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928539.045:67828): pid=482642 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928539.046:67829): pid=482642 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A757974796861777469727665676F6577796F6B7463646F696177636875707A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383533382E383039313138332D36313236382D3231383137373332353635303933372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928539.048:67830): pid=482642 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928539.052:67831): pid=482642 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928539.344:67832): prog-id=2456 op=LOAD type=SYSCALL msg=audit(1764928539.344:67832): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd4e9c1b00 a2=90 a3=9500000000 items=0 ppid=482659 pid=482660 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928539.344:67832): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373831316466396632346462306164333733656635633432623334356537 type=CRYPTO_KEY_USER msg=audit(1764928539.634:67833): pid=482509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=482515 suid=74 rport=47532 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928539.634:67834): pid=482509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482515 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928539.635:67835): pid=482509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928539.636:67836): pid=482509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928539.636:67837): pid=482509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928539.880:67838): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928539.880:67839): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928539.881:67840): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482683 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=BPF msg=audit(1764928539.923:67841): prog-id=0 op=UNLOAD type=USER_ACCT msg=audit(1764928539.930:67842): pid=482683 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928539.930:67843): pid=482683 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928539.931:67844): pid=482683 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928539.935:67845): pid=482683 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928539.937:67846): pid=482683 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928539.938:67847): pid=482683 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928539.942:67848): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928539.942:67849): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928539.945:67850): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928539.945:67851): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928539.946:67852): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482710 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928539.991:67853): pid=482710 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928539.991:67854): pid=482710 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928539.992:67855): pid=482710 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928539.994:67856): pid=482710 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928540.014:67857): pid=482642 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928540.015:67858): pid=482642 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928540.018:67859): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928540.018:67860): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928540.034:67861): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928540.034:67862): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928540.035:67863): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482729 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928540.060:67864): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928540.060:67865): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928540.166:67866): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928540.166:67867): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928540.168:67868): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482743 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928540.197:67869): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928540.197:67870): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928540.212:67871): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928540.212:67872): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928540.214:67873): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482756 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928540.248:67874): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928540.248:67875): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928540.270:67876): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928540.270:67877): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928540.272:67878): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482788 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_START msg=audit(1764928540.310:67879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928540.316:67880): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928540.316:67881): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928540.333:67882): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928540.333:67883): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928540.335:67884): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482822 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928540.367:67885): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928540.367:67886): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928540.390:67887): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928540.390:67888): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928540.392:67889): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=482839 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928540.451:67890): pid=482855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928540.451:67891): pid=482855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62677561796B79696F716C6B6A76757468706C777175626E626C657768636E75203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383534302E313939363936352D36313237392D32383234363930373739333338352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928540.452:67892): pid=482855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928540.455:67893): pid=482855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928540.727:67894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928540.782:67895): prog-id=2457 op=LOAD type=SYSCALL msg=audit(1764928540.782:67895): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdd10c9480 a2=90 a3=9500000000 items=0 ppid=482907 pid=482908 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928540.782:67895): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393564383561653465356161336666356237373063363939303731343635 type=BPF msg=audit(1764928541.218:67896): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928541.218:67897): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928541.373:67898): pid=482855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928541.373:67899): pid=482855 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928541.378:67900): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928541.378:67901): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928541.392:67902): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928541.392:67903): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928541.395:67904): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483019 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928541.422:67905): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928541.422:67906): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928541.551:67907): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928541.551:67908): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928541.553:67909): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483046 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928541.587:67910): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928541.587:67911): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928541.600:67912): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928541.600:67913): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928541.601:67914): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483059 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928541.641:67915): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928541.641:67916): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928541.663:67917): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928541.663:67918): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928541.665:67919): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483078 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928541.709:67920): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928541.709:67921): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928541.713:67922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928541.716:67923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928541.718:67924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928541.721:67925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928541.722:67926): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928541.722:67927): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928541.723:67928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928541.724:67929): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483102 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928541.726:67930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-79feddb1-4bfc-557f-83b9-0d57c9f66c1b@crash.np0005546415 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928541.753:67931): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928541.753:67932): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928541.768:67933): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928541.768:67934): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928541.772:67935): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483156 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928541.822:67936): pid=483178 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928541.822:67937): pid=483178 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C73776168696E706C69696B6B79637961756379747A67696F647776676778203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383534312E353839303035372D36313238382D36333736333937363538393036312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928541.823:67938): pid=483178 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928542.078:67939): prog-id=2458 op=LOAD type=BPF msg=audit(1764928542.078:67940): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928542.078:67941): prog-id=2459 op=LOAD type=BPF msg=audit(1764928542.078:67942): prog-id=2460 op=LOAD type=BPF msg=audit(1764928542.078:67943): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928542.078:67944): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928542.082:67945): prog-id=2461 op=LOAD type=BPF msg=audit(1764928542.082:67946): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928542.082:67947): prog-id=2462 op=LOAD type=BPF msg=audit(1764928542.082:67948): prog-id=2463 op=LOAD type=BPF msg=audit(1764928542.082:67949): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928542.082:67950): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928542.093:67951): prog-id=2464 op=LOAD type=BPF msg=audit(1764928542.093:67952): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928542.093:67953): prog-id=2465 op=LOAD type=BPF msg=audit(1764928542.093:67954): prog-id=2466 op=LOAD type=BPF msg=audit(1764928542.093:67955): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928542.093:67956): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928542.095:67957): prog-id=2467 op=LOAD type=BPF msg=audit(1764928542.095:67958): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1764928542.107:67959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928542.107:67960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928542.108:67961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928542.116:67962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764928542.117:67963): pid=483178 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928542.128:67964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928542.163:67965): pid=482710 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928542.163:67966): pid=482710 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928542.167:67967): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928542.167:67968): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928542.250:67969): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928542.250:67970): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928542.252:67971): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483305 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928542.309:67972): pid=483305 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928542.309:67973): pid=483305 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928542.310:67974): pid=483305 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928542.315:67975): pid=483305 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928542.318:67976): pid=483305 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928542.318:67977): pid=483305 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1764928542.323:67978): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928542.323:67979): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1764928542.326:67980): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1764928542.326:67981): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928542.328:67982): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483331 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1764928542.391:67983): pid=483331 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1764928542.391:67984): pid=483331 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F37396665646462312D346266632D353537662D383362392D3064353763396636366331622F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F75742038393520726D2D6461656D6F6E202D2D667369642037396665646462312D346266632D353537662D383362392D306435376339663636633162202D2D6E616D65206D67722E6E70303030353534363431352E6B6E71746C65202D2D666F726365202D2D7463702D706F72747320393238332038373635 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1764928542.392:67985): pid=483331 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1764928542.397:67986): pid=483331 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=BPF msg=audit(1764928542.429:67987): prog-id=2468 op=LOAD type=SYSCALL msg=audit(1764928542.429:67987): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff27999e30 a2=90 a3=9500000000 items=0 ppid=483349 pid=483351 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928542.429:67987): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303133653638396666356134363066646138353964373234393939376339 type=CRYPTO_KEY_USER msg=audit(1764928542.873:67988): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=480005 suid=1002 rport=42164 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928542.875:67989): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480005 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_END msg=audit(1764928542.880:67990): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928542.881:67991): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" type=USER_END msg=audit(1764928542.882:67992): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1764928542.882:67993): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928542.882:67994): pid=480002 uid=0 auid=1002 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=480002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root" type=BPF msg=audit(1764928542.914:67995): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928543.069:67996): pid=483178 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928543.070:67997): pid=483178 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928543.074:67998): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928543.075:67999): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928543.089:68000): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928543.089:68001): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928543.091:68002): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483428 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928543.126:68003): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928543.126:68004): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928543.350:68005): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928543.350:68006): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928543.351:68007): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483458 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928543.373:68008): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928543.373:68009): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928543.388:68010): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928543.388:68011): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928543.389:68012): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483471 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928543.416:68013): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928543.416:68014): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928543.435:68015): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928543.435:68016): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928543.437:68017): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483491 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928543.476:68018): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928543.476:68019): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928543.490:68020): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928543.490:68021): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928543.491:68022): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483513 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928543.528:68023): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928543.528:68024): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928543.545:68025): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928543.545:68026): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928543.546:68027): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483538 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928543.590:68028): pid=483557 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928543.590:68029): pid=483557 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737A786A797163796463746B776B65727577646A66796C736975726264757866203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383534332E333735343634372D36313330332D3132343936343930363937353235392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928543.592:68030): pid=483557 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928543.599:68031): pid=483557 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928543.657:68032): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928543.777:68033): pid=483557 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928543.777:68034): pid=483557 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928543.783:68035): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928543.783:68036): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928543.798:68037): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928543.798:68038): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928543.800:68039): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483593 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928543.829:68040): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928543.829:68041): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928543.948:68042): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928543.948:68043): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928543.951:68044): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483614 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928543.977:68045): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928543.977:68046): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928543.990:68047): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928543.990:68048): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928543.991:68049): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483632 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928544.025:68050): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928544.025:68051): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928544.045:68052): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928544.045:68053): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928544.046:68054): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483652 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928544.090:68055): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928544.090:68056): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928544.102:68057): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928544.102:68058): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928544.104:68059): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483665 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928544.135:68060): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928544.135:68061): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928544.153:68062): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928544.153:68063): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928544.154:68064): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483679 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928544.206:68065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-79feddb1-4bfc-557f-83b9-0d57c9f66c1b@mgr.np0005546415.knqtle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764928544.218:68066): pid=483694 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928544.218:68067): pid=483694 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727768757766666D787A656D72697376626178647079777871707A68746D6F71203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383534332E3937383839312D36313331342D3136333738343731333035373036312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928544.219:68068): pid=483694 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928544.239:68069): pid=483694 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928544.420:68070): pid=483694 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928544.420:68071): pid=483694 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928544.425:68072): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928544.425:68073): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928544.438:68074): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928544.438:68075): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928544.440:68076): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483738 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928544.468:68077): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928544.469:68078): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1764928544.503:68079): prog-id=2469 op=LOAD type=BPF msg=audit(1764928544.503:68080): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928544.503:68081): prog-id=2470 op=LOAD type=BPF msg=audit(1764928544.503:68082): prog-id=2471 op=LOAD type=BPF msg=audit(1764928544.503:68083): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928544.503:68084): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928544.505:68085): prog-id=2472 op=LOAD type=BPF msg=audit(1764928544.505:68086): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928544.506:68087): prog-id=2473 op=LOAD type=BPF msg=audit(1764928544.506:68088): prog-id=2474 op=LOAD type=BPF msg=audit(1764928544.506:68089): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928544.506:68090): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928544.514:68091): prog-id=2475 op=LOAD type=BPF msg=audit(1764928544.514:68092): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928544.514:68093): prog-id=2476 op=LOAD type=BPF msg=audit(1764928544.514:68094): prog-id=2477 op=LOAD type=BPF msg=audit(1764928544.514:68095): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928544.514:68096): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928544.515:68097): prog-id=2478 op=LOAD type=BPF msg=audit(1764928544.515:68098): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928544.568:68099): pid=483331 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1764928544.569:68100): pid=483331 uid=1002 auid=1002 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1764928549.190:68101): pid=483755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928549.433:68102): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928549.433:68103): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928549.434:68104): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483756 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928549.469:68105): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928549.469:68106): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928549.486:68107): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928549.486:68108): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928549.488:68109): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483769 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928549.521:68110): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928549.521:68111): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928549.538:68112): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928549.538:68113): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928549.539:68114): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483788 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928549.582:68115): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928549.582:68116): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928549.596:68117): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928549.596:68118): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928549.597:68119): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483801 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928549.622:68120): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928549.623:68121): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928549.639:68122): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928549.639:68123): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928549.640:68124): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483815 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928549.689:68125): pid=483830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928549.690:68126): pid=483830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928549.691:68127): pid=483830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928549.696:68128): pid=483830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928550.095:68129): prog-id=2479 op=LOAD type=SYSCALL msg=audit(1764928550.095:68129): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffad301f50 a2=90 a3=9500000000 items=0 ppid=483847 pid=483848 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928550.095:68129): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363934303363663365313538626235666561633239633832376637386130 type=BPF msg=audit(1764928550.557:68130): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928550.667:68131): pid=483830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928550.667:68132): pid=483830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928550.672:68133): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928550.673:68134): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928550.686:68135): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928550.686:68136): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928550.688:68137): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483886 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928550.718:68138): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928550.718:68139): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928550.807:68140): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928550.807:68141): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928550.809:68142): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483900 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928550.842:68143): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928550.843:68144): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928550.860:68145): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928550.860:68146): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928550.862:68147): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483913 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928550.898:68148): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928550.898:68149): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928550.919:68150): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928550.919:68151): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928550.921:68152): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483932 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928550.961:68153): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928550.961:68154): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928550.977:68155): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928550.977:68156): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928550.978:68157): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483945 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928551.010:68158): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928551.010:68159): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928551.026:68160): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928551.026:68161): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928551.028:68162): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483959 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928551.095:68163): pid=483974 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928551.095:68164): pid=483974 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79756772696E6D7A63696B6F707A67697069706C6A7363726674766E6C767969203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383535302E383435343337382D36313337342D34373432343530393438373033312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928551.096:68165): pid=483974 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928551.101:68166): pid=483974 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928551.398:68167): prog-id=2480 op=LOAD type=SYSCALL msg=audit(1764928551.398:68167): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff8276ce90 a2=90 a3=9500000000 items=0 ppid=483991 pid=483992 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928551.398:68167): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346165386635333463383032343637633531323963353665616334396365 type=BPF msg=audit(1764928551.809:68168): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928551.978:68169): pid=483974 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928551.978:68170): pid=483974 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928551.982:68171): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928551.982:68172): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928551.999:68173): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928551.999:68174): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928552.001:68175): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484031 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928552.084:68176): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928552.085:68177): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928552.207:68178): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928552.207:68179): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928552.209:68180): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484045 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928552.239:68181): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928552.239:68182): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928552.254:68183): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928552.254:68184): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928552.255:68185): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484058 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928552.289:68186): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928552.289:68187): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928552.308:68188): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928552.308:68189): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928552.309:68190): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484077 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=CRYPTO_SESSION msg=audit(1764928552.322:68191): pid=483754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=483755 suid=74 rport=58524 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928552.322:68192): pid=483754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=483755 suid=74 rport=58524 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1764928552.347:68193): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928552.348:68194): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928552.361:68195): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928552.362:68196): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928552.363:68197): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484090 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928552.389:68198): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928552.390:68199): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928552.405:68200): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928552.405:68201): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928552.406:68202): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484104 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928552.459:68203): pid=484119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928552.459:68204): pid=484119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E66787A76717A7166656A66646E74706E6E677868686E636F6B796179667378203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383535322E323432333730382D36313338332D33393530363539353539313430322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928552.461:68205): pid=484119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928552.465:68206): pid=484119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928552.778:68207): prog-id=2481 op=LOAD type=SYSCALL msg=audit(1764928552.778:68207): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffc5db0950 a2=90 a3=9500000000 items=0 ppid=484137 pid=484138 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928552.778:68207): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623233633432326530653936653139646161353635383536623266306161 type=SERVICE_START msg=audit(1764928554.014:68208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928554.189:68209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928554.765:68210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928554.798:68211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928554.876:68212): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928555.471:68213): pid=484119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928555.471:68214): pid=484119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928555.478:68215): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928555.478:68216): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928555.500:68217): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928555.500:68218): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928555.501:68219): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484219 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928555.535:68220): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928555.535:68221): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928555.880:68222): pid=483754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=483755 suid=74 rport=58524 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928555.881:68223): pid=483754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483755 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928555.882:68224): pid=483754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=483754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928555.882:68225): pid=483754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928556.314:68226): pid=484238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484238 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928556.570:68227): pid=484237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=484238 suid=74 rport=58348 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928556.570:68228): pid=484237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=484238 suid=74 rport=58348 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928557.937:68229): pid=484237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=484238 suid=74 rport=58348 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928557.938:68230): pid=484237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484238 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928557.939:68231): pid=484237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928557.939:68232): pid=484237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484237 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928557.939:68233): pid=484237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928565.010:68234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928565.146:68235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928565.777:68236): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928565.777:68237): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928565.779:68238): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484258 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928565.812:68239): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928565.812:68240): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928565.827:68241): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928565.827:68242): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928565.828:68243): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484271 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928565.862:68244): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928565.862:68245): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928565.885:68246): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928565.885:68247): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928565.887:68248): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484290 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928565.932:68249): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928565.932:68250): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928565.945:68251): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928565.946:68252): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928565.947:68253): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484303 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928565.980:68254): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928565.980:68255): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928565.994:68256): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928565.994:68257): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928565.996:68258): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484317 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928566.065:68259): pid=484332 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928566.066:68260): pid=484332 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6476626574726F646667766D6D6E6567786F786372746A727575646D63637775203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383536352E383134353230362D36313339372D3135393634333634313230383832352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928566.068:68261): pid=484332 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928566.073:68262): pid=484332 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928566.422:68263): prog-id=2482 op=LOAD type=SYSCALL msg=audit(1764928566.422:68263): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd39771ea0 a2=90 a3=9500000000 items=0 ppid=484349 pid=484350 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928566.422:68263): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383661303936626638336338336338373965373339336163383730333037 type=CRYPTO_KEY_USER msg=audit(1764928567.367:68264): pid=484374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928567.446:68265): pid=484373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=484374 suid=74 rport=53034 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928567.447:68266): pid=484373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=484374 suid=74 rport=53034 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928567.792:68267): pid=484373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=484374 suid=74 rport=53034 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928567.793:68268): pid=484373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484374 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928567.793:68269): pid=484373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928567.794:68270): pid=484373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928567.794:68271): pid=484373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928567.840:68272): pid=484239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=BPF msg=audit(1764928569.860:68273): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928569.978:68274): pid=484332 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928569.978:68275): pid=484332 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928569.983:68276): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928569.983:68277): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928570.001:68278): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928570.001:68279): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928570.004:68280): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484389 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928570.038:68281): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928570.038:68282): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928571.010:68283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928571.283:68284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928573.015:68285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928573.019:68286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928573.023:68287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928573.028:68288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928573.034:68289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928573.360:68290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928573.373:68291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928573.413:68292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928573.473:68293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928573.522:68294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928580.156:68295): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928580.156:68296): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928580.158:68297): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484614 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928580.188:68298): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928580.188:68299): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928580.202:68300): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928580.203:68301): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928580.204:68302): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484627 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928580.240:68303): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928580.240:68304): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928580.261:68305): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928580.261:68306): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928580.263:68307): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484646 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928580.307:68308): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928580.308:68309): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928580.322:68310): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928580.322:68311): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928580.324:68312): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484659 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928580.355:68313): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928580.355:68314): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928580.374:68315): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928580.374:68316): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928580.375:68317): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484673 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928580.444:68318): pid=484688 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928580.445:68319): pid=484688 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7077796962767872626669616A61616C6D616F766177696462676D646A686765203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383538302E313930323235382D36313430392D3233303936373234353032333733392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928580.445:68320): pid=484688 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928580.451:68321): pid=484688 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928580.812:68322): prog-id=2483 op=LOAD type=SYSCALL msg=audit(1764928580.812:68322): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff07cb0370 a2=90 a3=9500000000 items=0 ppid=484706 pid=484707 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928580.812:68322): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356466373538333239653831323863313765393266343965643932303338 type=BPF msg=audit(1764928581.313:68323): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928581.422:68324): pid=484688 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928581.423:68325): pid=484688 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928581.428:68326): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928581.428:68327): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928581.443:68328): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928581.443:68329): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928581.445:68330): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484745 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928581.480:68331): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928581.480:68332): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928581.590:68333): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928581.591:68334): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928581.592:68335): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484759 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928581.624:68336): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928581.625:68337): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928581.638:68338): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928581.638:68339): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928581.639:68340): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484772 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928581.677:68341): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928581.678:68342): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928581.698:68343): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928581.698:68344): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928581.700:68345): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484791 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928581.747:68346): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928581.747:68347): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928581.761:68348): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928581.761:68349): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928581.763:68350): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484804 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928581.798:68351): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928581.799:68352): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928581.813:68353): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928581.814:68354): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928581.816:68355): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484818 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928581.885:68356): pid=484833 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928581.886:68357): pid=484833 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61747665796B667465756A616764636F6B6C777072736466716E6A6F75776661203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383538312E363236373438332D36313431382D38353138343135373839323835362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928581.887:68358): pid=484833 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928581.891:68359): pid=484833 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928582.215:68360): prog-id=2484 op=LOAD type=SYSCALL msg=audit(1764928582.215:68360): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeae82f260 a2=90 a3=9500000000 items=0 ppid=484850 pid=484851 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928582.215:68360): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376162643136643464306131336532333064343732633063386137363136 type=BPF msg=audit(1764928582.811:68361): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928582.939:68362): pid=484833 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928582.939:68363): pid=484833 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928582.944:68364): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928582.944:68365): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928582.963:68366): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928582.963:68367): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928582.965:68368): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484890 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928583.000:68369): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928583.001:68370): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928583.212:68371): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928583.213:68372): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928583.216:68373): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484904 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928583.249:68374): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928583.249:68375): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928583.263:68376): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928583.263:68377): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928583.264:68378): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484917 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928583.303:68379): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928583.303:68380): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928583.323:68381): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928583.323:68382): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928583.324:68383): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484936 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928583.369:68384): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928583.369:68385): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928583.390:68386): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928583.391:68387): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928583.392:68388): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484949 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928583.425:68389): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928583.425:68390): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928583.442:68391): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928583.442:68392): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928583.444:68393): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=484963 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928583.514:68394): pid=484978 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928583.516:68395): pid=484978 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A777A737676707267626D666F7372766A74797A6576766C726F7476706C63203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383538332E323531353231382D36313433332D3231313733353332363331302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928583.517:68396): pid=484978 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928583.522:68397): pid=484978 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928583.839:68398): prog-id=2485 op=LOAD type=SYSCALL msg=audit(1764928583.839:68398): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc51415810 a2=90 a3=9500000000 items=0 ppid=484996 pid=484997 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928583.839:68398): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613966353836316233343337356265373934326365363237336437643362 type=SERVICE_START msg=audit(1764928584.416:68399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928584.418:68400): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928584.601:68401): pid=484978 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928584.601:68402): pid=484978 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928584.607:68403): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928584.607:68404): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928584.619:68405): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928584.619:68406): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928584.621:68407): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485061 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928584.654:68408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928584.658:68409): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928584.658:68410): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928594.757:68411): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928594.757:68412): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928594.760:68413): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485079 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928594.790:68414): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928594.790:68415): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928594.806:68416): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928594.806:68417): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928594.807:68418): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485092 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928594.839:68419): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928594.840:68420): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928594.863:68421): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928594.863:68422): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928594.864:68423): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485111 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928594.911:68424): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928594.911:68425): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928594.936:68426): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928594.936:68427): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928594.938:68428): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485124 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928594.985:68429): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928594.986:68430): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928595.003:68431): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928595.003:68432): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928595.004:68433): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485137 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928595.037:68434): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928595.038:68435): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928595.054:68436): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928595.054:68437): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928595.057:68438): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485151 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928595.121:68439): pid=485166 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928595.122:68440): pid=485166 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928595.123:68441): pid=485166 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928595.129:68442): pid=485166 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928595.321:68443): pid=485166 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928595.321:68444): pid=485166 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928595.327:68445): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928595.327:68446): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928595.350:68447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928595.478:68448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928595.652:68449): prog-id=2486 op=LOAD type=SYSCALL msg=audit(1764928595.652:68449): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd379a07d0 a2=90 a3=9500000000 items=0 ppid=485208 pid=485209 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928595.652:68449): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316233343764616537323938333761653630353535636532643632383763 type=USER_LOGIN msg=audit(1764928596.349:68450): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928596.349:68451): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928596.351:68452): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485232 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928596.381:68453): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928596.381:68454): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928596.394:68455): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928596.394:68456): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928596.396:68457): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485245 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928596.420:68458): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928596.420:68459): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928596.434:68460): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928596.434:68461): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928596.435:68462): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485258 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928596.471:68463): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928596.471:68464): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928596.493:68465): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928596.493:68466): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928596.494:68467): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485277 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928596.530:68468): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928596.530:68469): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928596.546:68470): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928596.546:68471): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928596.547:68472): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485290 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928596.571:68473): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928596.571:68474): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928596.588:68475): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928596.588:68476): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928596.590:68477): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485304 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928596.643:68478): pid=485319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928596.644:68479): pid=485319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697378756F65687063687070796873676F6C6568667974666D6F6D76707A6B68203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928596.645:68480): pid=485319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928596.648:68481): pid=485319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928596.802:68482): pid=485319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928596.802:68483): pid=485319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928596.805:68484): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928596.806:68485): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928597.823:68486): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928597.823:68487): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928597.825:68488): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485322 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928597.859:68489): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928597.860:68490): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928597.877:68491): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928597.877:68492): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928597.878:68493): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485335 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928597.924:68494): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928597.924:68495): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928597.938:68496): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928597.938:68497): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928597.940:68498): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485348 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928597.976:68499): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928597.977:68500): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928597.990:68501): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928597.991:68502): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928597.992:68503): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485362 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928598.050:68504): pid=485377 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928598.051:68505): pid=485377 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C72716F6867636268706F75727065666E63726B7363676C78646E79687374203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928598.051:68506): pid=485377 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928598.054:68507): pid=485377 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928598.228:68508): pid=485377 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928598.228:68509): pid=485377 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928598.231:68510): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928598.231:68511): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928599.250:68512): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928599.250:68513): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928599.251:68514): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485380 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928599.282:68515): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928599.282:68516): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928599.302:68517): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928599.302:68518): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928599.303:68519): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485393 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928599.349:68520): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928599.349:68521): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928599.367:68522): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928599.367:68523): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928599.369:68524): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485406 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928599.401:68525): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928599.401:68526): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928599.417:68527): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928599.417:68528): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928599.420:68529): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485420 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928599.487:68530): pid=485435 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928599.487:68531): pid=485435 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6E6D6465696B6C6F686B6764676A707973676D6F61737676706A6D72676B61203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928599.489:68532): pid=485435 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928599.492:68533): pid=485435 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928599.664:68534): pid=485435 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928599.664:68535): pid=485435 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928599.668:68536): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928599.668:68537): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928600.686:68538): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928600.686:68539): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928600.688:68540): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485438 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928600.716:68541): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928600.716:68542): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928600.743:68543): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928600.743:68544): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928600.745:68545): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485451 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928600.802:68546): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928600.802:68547): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928600.816:68548): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928600.816:68549): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928600.817:68550): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485464 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928600.849:68551): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928600.849:68552): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928600.871:68553): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928600.871:68554): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928600.873:68555): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485478 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928600.927:68556): pid=485493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928600.927:68557): pid=485493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7563737A787278717178786A746B666D79737677756A6462786F61726F696972203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928600.928:68558): pid=485493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928600.931:68559): pid=485493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928601.068:68560): pid=485493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928601.068:68561): pid=485493 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928601.072:68562): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928601.072:68563): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928602.024:68564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928602.089:68565): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928602.089:68566): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928602.091:68567): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485507 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928602.132:68568): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928602.132:68569): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928602.152:68570): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928602.152:68571): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928602.154:68572): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485531 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928602.200:68573): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928602.201:68574): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928602.215:68575): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928602.216:68576): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928602.217:68577): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485548 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928602.250:68578): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928602.250:68579): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928602.267:68580): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928602.267:68581): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928602.269:68582): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485567 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928602.300:68583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764928602.341:68584): pid=485582 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928602.342:68585): pid=485582 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C626E70656F68717872707672716C71746970686870737A71746C6A6474736B203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928602.345:68586): pid=485582 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928602.350:68587): pid=485582 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928602.570:68588): pid=485582 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928602.570:68589): pid=485582 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928602.573:68590): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928602.573:68591): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928603.591:68592): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928603.591:68593): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928603.592:68594): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485585 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928603.625:68595): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928603.625:68596): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928603.649:68597): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928603.649:68598): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928603.651:68599): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485598 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928603.693:68600): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928603.693:68601): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928603.708:68602): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928603.708:68603): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928603.710:68604): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485611 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928603.740:68605): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928603.740:68606): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928603.757:68607): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928603.757:68608): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928603.759:68609): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485625 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928603.812:68610): pid=485640 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928603.812:68611): pid=485640 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636C6B726F7264617467666163636378756578627972686370616970736B7464203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928603.813:68612): pid=485640 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928603.833:68613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928603.836:68614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928603.841:68615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928603.845:68616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928603.849:68617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764928603.853:68618): pid=485640 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928604.026:68619): pid=485640 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928604.026:68620): pid=485640 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928604.033:68621): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928604.033:68622): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928604.190:68623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928604.232:68624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928604.239:68625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928604.262:68626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928604.319:68627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928605.057:68628): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928605.057:68629): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928605.060:68630): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485787 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928605.092:68631): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928605.092:68632): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928605.116:68633): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928605.117:68634): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928605.119:68635): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485800 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928605.176:68636): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928605.176:68637): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928605.196:68638): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928605.196:68639): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928605.197:68640): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485813 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928605.230:68641): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928605.230:68642): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928605.244:68643): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928605.244:68644): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928605.246:68645): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485827 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928605.314:68646): pid=485842 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928605.315:68647): pid=485842 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78796769646B626D64626570756C6865726D727A6368746D66776F776A617669203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928605.316:68648): pid=485842 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928605.321:68649): pid=485842 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928605.489:68650): pid=485842 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928605.489:68651): pid=485842 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928605.494:68652): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928605.494:68653): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928606.510:68654): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928606.510:68655): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928606.511:68656): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485845 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928606.541:68657): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928606.541:68658): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928606.562:68659): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928606.562:68660): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928606.564:68661): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485858 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928606.604:68662): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928606.604:68663): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928606.618:68664): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928606.619:68665): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928606.620:68666): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485871 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928606.653:68667): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928606.653:68668): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928606.668:68669): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928606.668:68670): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928606.669:68671): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485885 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928606.738:68672): pid=485900 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928606.739:68673): pid=485900 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727567787979677868756C7463707A7178777866796E69686263646F646E7573203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928606.739:68674): pid=485900 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928606.744:68675): pid=485900 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928606.922:68676): pid=485900 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928606.922:68677): pid=485900 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928606.927:68678): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928606.927:68679): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928607.945:68680): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928607.945:68681): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928607.947:68682): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485903 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928607.976:68683): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928607.976:68684): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928607.993:68685): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928607.993:68686): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928607.995:68687): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485916 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928608.034:68688): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928608.034:68689): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928608.049:68690): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928608.049:68691): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928608.051:68692): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485929 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928608.082:68693): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928608.082:68694): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928608.096:68695): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928608.097:68696): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928608.098:68697): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485943 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928608.164:68698): pid=485958 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928608.164:68699): pid=485958 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766664617173686A7970716C69796B6F6C657A6B74616A7870687265786B6F68203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928608.165:68700): pid=485958 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928608.169:68701): pid=485958 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928608.383:68702): pid=485958 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928608.383:68703): pid=485958 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928608.387:68704): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928608.388:68705): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928609.405:68706): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928609.405:68707): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928609.406:68708): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485961 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928609.439:68709): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928609.439:68710): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928609.463:68711): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928609.463:68712): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928609.464:68713): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485974 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928609.516:68714): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928609.516:68715): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928609.531:68716): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928609.531:68717): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928609.533:68718): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=485987 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928609.568:68719): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928609.568:68720): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928609.583:68721): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928609.583:68722): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928609.585:68723): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486001 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928609.650:68724): pid=486016 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928609.650:68725): pid=486016 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65666B6A74757667736A6C67666961756671716B7877796D76746B68656F6E6A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928609.652:68726): pid=486016 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928609.655:68727): pid=486016 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928609.827:68728): pid=486016 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928609.827:68729): pid=486016 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928609.830:68730): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928609.830:68731): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928610.848:68732): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928610.848:68733): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928610.849:68734): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486019 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928610.883:68735): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928610.883:68736): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928610.901:68737): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928610.901:68738): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928610.902:68739): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486032 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928610.949:68740): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928610.949:68741): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928610.964:68742): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928610.964:68743): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928610.966:68744): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486045 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928611.000:68745): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928611.000:68746): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928611.014:68747): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928611.014:68748): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928611.015:68749): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486059 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928611.077:68750): pid=486074 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928611.077:68751): pid=486074 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6A7467626675667A6A6D75646C6A71697476626F636274746D64626B6B6161203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928611.078:68752): pid=486074 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928611.080:68753): pid=486074 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928611.249:68754): pid=486074 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928611.249:68755): pid=486074 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928611.254:68756): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928611.254:68757): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928612.270:68758): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928612.270:68759): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928612.272:68760): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486077 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928612.303:68761): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928612.303:68762): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928612.324:68763): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928612.324:68764): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928612.325:68765): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486090 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928612.385:68766): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928612.385:68767): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928612.399:68768): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928612.399:68769): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928612.401:68770): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486103 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928612.435:68771): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928612.436:68772): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928612.449:68773): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928612.450:68774): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928612.452:68775): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486117 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928612.554:68776): pid=486132 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928612.555:68777): pid=486132 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E736D6678687674737771797868616268786275636478636E67737A717674203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928612.555:68778): pid=486132 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928612.559:68779): pid=486132 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928612.686:68780): pid=486132 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928612.686:68781): pid=486132 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928612.690:68782): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928612.690:68783): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928612.780:68784): pid=486136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928612.796:68785): pid=486135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=486136 suid=74 rport=53304 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928612.796:68786): pid=486135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=486136 suid=74 rport=53304 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928612.886:68787): pid=486138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764928612.959:68788): pid=486135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=486136 suid=74 rport=53304 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928612.960:68789): pid=486135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486136 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928612.961:68790): pid=486135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=192.227.128.3 addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928612.961:68791): pid=486135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928612.961:68792): pid=486135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.227.128.3 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764928613.150:68793): pid=486137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=486138 suid=74 rport=34088 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928613.150:68794): pid=486137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=486138 suid=74 rport=34088 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764928613.708:68795): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928613.708:68796): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928613.710:68797): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486139 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928613.744:68798): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928613.744:68799): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928613.760:68800): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928613.760:68801): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928613.762:68802): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486152 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928613.807:68803): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928613.807:68804): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928613.821:68805): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928613.821:68806): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928613.822:68807): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486165 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928613.853:68808): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928613.853:68809): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928613.869:68810): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928613.869:68811): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928613.870:68812): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486179 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928613.934:68813): pid=486194 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928613.934:68814): pid=486194 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64796C707775746A6D6F766A6B726C6F756B7165646678766D7A746368736675203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928613.936:68815): pid=486194 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928613.939:68816): pid=486194 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928614.105:68817): pid=486194 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928614.105:68818): pid=486194 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928614.109:68819): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928614.109:68820): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928615.005:68821): pid=486137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=486138 suid=74 rport=34088 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928615.005:68822): pid=486137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486138 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928615.018:68823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ERR msg=audit(1764928615.019:68824): pid=486137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928615.019:68825): pid=486137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928615.019:68826): pid=486137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928615.127:68827): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928615.127:68828): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928615.128:68829): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486213 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928615.162:68830): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928615.162:68831): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928615.183:68832): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928615.184:68833): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928615.185:68834): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486236 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928615.227:68835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928615.236:68836): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928615.236:68837): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928615.250:68838): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928615.250:68839): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928615.252:68840): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486249 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928615.290:68841): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928615.290:68842): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928615.306:68843): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928615.306:68844): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928615.308:68845): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486263 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928615.375:68846): pid=486278 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928615.375:68847): pid=486278 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6972656F7871736F64686F78786A786A637A6C7A6264717177707969656F6168203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928615.376:68848): pid=486278 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928615.381:68849): pid=486278 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928615.577:68850): pid=486278 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928615.578:68851): pid=486278 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928615.581:68852): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928615.582:68853): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928616.600:68854): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928616.601:68855): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928616.604:68856): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486281 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928616.636:68857): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928616.636:68858): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928616.659:68859): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928616.659:68860): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928616.660:68861): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486294 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928616.713:68862): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928616.713:68863): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928616.730:68864): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928616.730:68865): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928616.733:68866): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486307 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928616.766:68867): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928616.766:68868): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928616.779:68869): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928616.779:68870): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928616.781:68871): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486321 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928616.843:68872): pid=486336 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928616.843:68873): pid=486336 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77646A61736F7A676872676E7677627273646E737472756D67676D616B736973203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928616.846:68874): pid=486336 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928616.849:68875): pid=486336 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928617.024:68876): pid=486336 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928617.025:68877): pid=486336 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928617.027:68878): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928617.029:68879): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928617.029:68880): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928618.045:68881): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928618.045:68882): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928618.047:68883): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486356 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928618.081:68884): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928618.082:68885): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928618.100:68886): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928618.100:68887): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928618.102:68888): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486369 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928618.147:68889): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928618.148:68890): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928618.161:68891): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928618.162:68892): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928618.163:68893): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486382 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928618.195:68894): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928618.195:68895): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928618.209:68896): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928618.210:68897): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928618.212:68898): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486396 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928618.270:68899): pid=486411 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928618.271:68900): pid=486411 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706E7462716E63717466736F63677175776C6C706E786D7A6A7075747078796E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928618.272:68901): pid=486411 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928618.275:68902): pid=486411 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928618.454:68903): pid=486411 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928618.454:68904): pid=486411 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928618.458:68905): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928618.458:68906): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928618.475:68907): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928618.475:68908): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928618.477:68909): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486414 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928618.504:68910): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928618.504:68911): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928618.522:68912): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928618.522:68913): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928618.523:68914): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486427 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928618.564:68915): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928618.565:68916): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928618.578:68917): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928618.579:68918): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928618.581:68919): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486440 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928618.612:68920): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928618.613:68921): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928618.627:68922): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928618.627:68923): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928618.629:68924): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486454 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928618.689:68925): pid=486469 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928618.690:68926): pid=486469 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75676376696575767562656A717164707064697874696F6572716F72766D757A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383539362E343232333136362D36313434362D35383532343438353637393530382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928618.691:68927): pid=486469 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928618.695:68928): pid=486469 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928618.881:68929): pid=486469 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928618.882:68930): pid=486469 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928618.886:68931): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928618.886:68932): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928618.901:68933): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928618.901:68934): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928618.903:68935): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486472 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928618.937:68936): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928618.937:68937): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928619.114:68938): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928619.115:68939): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928619.116:68940): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486486 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928619.149:68941): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928619.149:68942): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928619.165:68943): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928619.165:68944): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928619.167:68945): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486499 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928619.207:68946): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928619.207:68947): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928619.226:68948): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928619.227:68949): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928619.228:68950): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486518 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928619.277:68951): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928619.277:68952): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928619.295:68953): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928619.295:68954): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928619.297:68955): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486531 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928619.330:68956): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928619.330:68957): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928619.346:68958): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928619.347:68959): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928619.348:68960): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486545 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928619.414:68961): pid=486560 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928619.415:68962): pid=486560 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79797173756262617A6D626F7365676E756372627A726E626A73657171696576203B20434550485F434F4E5441494E45525F494D4147453D72656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C617465737420434550485F434F4E5441494E45525F42494E4152593D706F646D616E20434550485F434F4E463D2F686F6D652F747269706C656F2D61646D696E2F636570685F636C69656E74202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383631392E3135323531312D36313535302D3138373436393234303131363332322F416E736962616C6C5A5F636570685F6D6B737065632E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928619.415:68963): pid=486560 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928619.418:68964): pid=486560 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928619.777:68965): prog-id=2487 op=LOAD type=SYSCALL msg=audit(1764928619.777:68965): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffff74c5f20 a2=90 a3=9500000000 items=0 ppid=486577 pid=486578 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928619.777:68965): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356533383834616539323165633561646135623734386435323838316261 type=CRYPTO_KEY_USER msg=audit(1764928619.933:68966): pid=486591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928620.174:68967): pid=486355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=486591 suid=74 rport=54576 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928620.174:68968): pid=486355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=486591 suid=74 rport=54576 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1764928620.260:68969): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928620.383:68970): pid=486560 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928620.383:68971): pid=486560 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928620.389:68972): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928620.389:68973): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928620.405:68974): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928620.405:68975): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928620.406:68976): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486617 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928620.444:68977): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928620.444:68978): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928620.580:68979): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928620.580:68980): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928620.582:68981): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486631 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928620.615:68982): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928620.615:68983): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928620.629:68984): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928620.629:68985): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928620.630:68986): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486644 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928620.668:68987): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928620.668:68988): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928620.690:68989): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928620.690:68990): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928620.691:68991): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486663 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928620.738:68992): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928620.738:68993): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928620.755:68994): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928620.755:68995): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928620.756:68996): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486676 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928620.789:68997): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928620.790:68998): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928620.807:68999): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928620.807:69000): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928620.809:69001): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486690 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928620.877:69002): pid=486705 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928620.877:69003): pid=486705 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71787865736C6E646761796469717A6F72726C62726A6A626D6E66726B63716F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383632302E36313832332D36313536332D31303933373336383838323335302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928620.878:69004): pid=486705 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928620.883:69005): pid=486705 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928621.218:69006): prog-id=2488 op=LOAD type=SYSCALL msg=audit(1764928621.218:69006): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcdaa3ee00 a2=90 a3=9500000000 items=0 ppid=486723 pid=486724 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928621.218:69006): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346266396434396534626265663664626464313865373632323634383464 type=BPF msg=audit(1764928621.702:69007): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928621.834:69008): pid=486705 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928621.834:69009): pid=486705 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928621.840:69010): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928621.840:69011): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928621.855:69012): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928621.855:69013): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928621.857:69014): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486763 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928621.895:69015): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928621.895:69016): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928622.124:69017): pid=486355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=486591 suid=74 rport=54576 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928622.125:69018): pid=486355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486591 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928622.126:69019): pid=486355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.225.21 addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928622.127:69020): pid=486355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486355 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928622.127:69021): pid=486355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928622.190:69022): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928622.190:69023): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928622.192:69024): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486777 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928622.226:69025): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928622.226:69026): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928622.238:69027): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928622.238:69028): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928622.240:69029): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486790 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928622.278:69030): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928622.278:69031): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928622.297:69032): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928622.297:69033): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928622.299:69034): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486809 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928622.342:69035): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928622.343:69036): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928622.357:69037): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928622.357:69038): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928622.358:69039): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486822 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928622.390:69040): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928622.390:69041): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928622.405:69042): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928622.406:69043): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928622.407:69044): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486836 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928622.474:69045): pid=486851 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928622.474:69046): pid=486851 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63666269716173786F7867616D727173726565676A75786871737A6C75646E78203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383632322E323238383037322D36313538302D3233393636353233353032383435302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928622.475:69047): pid=486851 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928622.479:69048): pid=486851 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928622.821:69049): prog-id=2489 op=LOAD type=SYSCALL msg=audit(1764928622.821:69049): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd579b3de0 a2=90 a3=9500000000 items=0 ppid=486868 pid=486869 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928622.821:69049): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323035653630636566343565326335383364636435623337653930656662 type=BPF msg=audit(1764928623.327:69050): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928623.436:69051): pid=486851 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928623.436:69052): pid=486851 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928623.441:69053): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928623.441:69054): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928623.454:69055): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928623.454:69056): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928623.456:69057): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486909 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928623.491:69058): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928623.492:69059): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928626.022:69060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928626.184:69061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928627.002:69062): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928627.002:69063): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928627.005:69064): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486941 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928627.041:69065): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928627.041:69066): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928627.055:69067): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928627.056:69068): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928627.057:69069): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486954 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928627.097:69070): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928627.097:69071): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928627.119:69072): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928627.120:69073): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928627.121:69074): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486973 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928627.175:69075): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928627.176:69076): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928627.191:69077): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928627.191:69078): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928627.192:69079): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486986 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928627.228:69080): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928627.228:69081): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928627.243:69082): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928627.243:69083): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928627.245:69084): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487000 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928627.323:69085): pid=487015 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928627.323:69086): pid=487015 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6964696A7678716171706879736277666C6165796C7178626E636471666F62203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383632372E303433353332312D36313633362D343138323036353932363331322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928627.326:69087): pid=487015 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928627.332:69088): pid=487015 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928627.654:69089): prog-id=2490 op=LOAD type=SYSCALL msg=audit(1764928627.654:69089): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc4496f430 a2=90 a3=9500000000 items=0 ppid=487033 pid=487034 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928627.654:69089): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383037623634613932396639303564323363633735623034663635666236 type=BPF msg=audit(1764928628.117:69090): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928628.221:69091): pid=487015 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928628.221:69092): pid=487015 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928628.225:69093): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928628.226:69094): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928628.241:69095): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928628.241:69096): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928628.243:69097): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487075 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928628.273:69098): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928628.273:69099): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928628.583:69100): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928628.583:69101): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928628.585:69102): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487089 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928628.620:69103): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928628.620:69104): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928628.634:69105): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928628.634:69106): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928628.636:69107): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487102 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928628.677:69108): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928628.677:69109): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928628.699:69110): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928628.699:69111): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928628.701:69112): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487121 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928628.752:69113): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928628.752:69114): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928628.769:69115): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928628.769:69116): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928628.770:69117): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487134 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928628.802:69118): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928628.802:69119): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928628.817:69120): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928628.817:69121): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928628.819:69122): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487148 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928628.887:69123): pid=487163 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928628.887:69124): pid=487163 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76747665726C72697872796F65647669626A78766D727368796E6D7776787771203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383632382E363232323633322D36313635352D34313233343237313937343734322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928628.888:69125): pid=487163 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928628.892:69126): pid=487163 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928629.228:69127): prog-id=2491 op=LOAD type=SYSCALL msg=audit(1764928629.228:69127): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff168f0640 a2=90 a3=9500000000 items=0 ppid=487180 pid=487181 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928629.228:69127): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653130313736306463366538656165373832646162323236366536653630 type=BPF msg=audit(1764928629.789:69128): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928629.908:69129): pid=487163 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928629.909:69130): pid=487163 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928629.913:69131): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928629.913:69132): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928629.936:69133): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928629.936:69134): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928629.939:69135): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487220 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928629.970:69136): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928629.970:69137): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928632.629:69138): pid=487235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487235 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928632.874:69139): pid=487234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=487235 suid=74 rport=54996 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928632.875:69140): pid=487234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=487235 suid=74 rport=54996 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928633.008:69141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928633.200:69142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928634.210:69143): pid=487234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=487235 suid=74 rport=54996 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928634.210:69144): pid=487234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487235 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928634.211:69145): pid=487234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928634.212:69146): pid=487234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928634.212:69147): pid=487234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928634.234:69148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928634.239:69149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928634.244:69150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928634.370:69151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928634.374:69152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928634.557:69153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928634.589:69154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928634.632:69155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928634.641:69156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928634.758:69157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928636.384:69158): pid=486923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=486923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928640.078:69159): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928640.078:69160): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928640.081:69161): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487446 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928640.114:69162): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928640.114:69163): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928640.131:69164): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928640.131:69165): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928640.133:69166): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487459 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928640.167:69167): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928640.167:69168): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928640.192:69169): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928640.192:69170): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928640.193:69171): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487478 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928640.240:69172): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928640.240:69173): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928640.264:69174): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928640.264:69175): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928640.266:69176): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487491 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928640.319:69177): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928640.319:69178): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928640.336:69179): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928640.337:69180): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928640.338:69181): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487504 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928640.368:69182): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928640.368:69183): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928640.389:69184): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928640.390:69185): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928640.392:69186): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487518 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928640.461:69187): pid=487533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928640.462:69188): pid=487533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928640.463:69189): pid=487533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928640.468:69190): pid=487533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928640.662:69191): pid=487533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928640.662:69192): pid=487533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928640.666:69193): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928640.666:69194): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1764928641.060:69195): prog-id=2492 op=LOAD type=SYSCALL msg=audit(1764928641.060:69195): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd21435f40 a2=90 a3=9500000000 items=0 ppid=487555 pid=487556 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928641.060:69195): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306163376135376537343030366636393339363564653935326337643331 type=BPF msg=audit(1764928641.515:69196): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1764928641.698:69197): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928641.698:69198): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928641.700:69199): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487594 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928641.734:69200): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928641.734:69201): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928641.749:69202): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928641.750:69203): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928641.751:69204): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487607 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928641.782:69205): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928641.782:69206): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928641.803:69207): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928641.803:69208): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928641.804:69209): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487620 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928641.843:69210): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928641.843:69211): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928641.865:69212): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928641.865:69213): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928641.867:69214): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487639 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928641.915:69215): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928641.915:69216): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928641.935:69217): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928641.935:69218): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928641.936:69219): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487652 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928641.970:69220): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928641.970:69221): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928641.990:69222): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928641.990:69223): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928641.993:69224): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487666 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928642.065:69225): pid=487681 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928642.065:69226): pid=487681 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61666A61696478786C617A636E6F6667766F7A6470706A6568667876626D6D62203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383634312E373835303432382D36313636372D36313730313934323036373337382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928642.066:69227): pid=487681 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928642.072:69228): pid=487681 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928642.244:69229): pid=487681 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928642.245:69230): pid=487681 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928642.250:69231): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928642.251:69232): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928642.266:69233): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928642.266:69234): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928642.268:69235): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487684 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928642.292:69236): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928642.292:69237): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928642.309:69238): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928642.310:69239): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928642.311:69240): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487697 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928642.353:69241): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928642.354:69242): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928642.367:69243): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928642.367:69244): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928642.369:69245): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487710 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928642.397:69246): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928642.398:69247): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928642.413:69248): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928642.413:69249): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928642.415:69250): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487724 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928642.480:69251): pid=487739 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928642.481:69252): pid=487739 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B776177746E686A72756B7468786B6F74766E6E677268777167626C6B616B76203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383634312E373835303432382D36313636372D36313730313934323036373337382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928642.481:69253): pid=487739 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928642.485:69254): pid=487739 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928642.664:69255): pid=487739 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928642.664:69256): pid=487739 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928642.669:69257): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928642.669:69258): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928642.683:69259): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928642.683:69260): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928642.685:69261): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487742 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928642.768:69262): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928642.768:69263): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928643.094:69264): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928643.094:69265): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928643.095:69266): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487756 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928643.129:69267): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928643.129:69268): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928643.143:69269): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928643.143:69270): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928643.144:69271): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487769 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928643.185:69272): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928643.186:69273): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928643.204:69274): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928643.205:69275): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928643.206:69276): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487788 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928643.256:69277): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928643.256:69278): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928643.270:69279): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928643.270:69280): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928643.271:69281): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487801 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928643.305:69282): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928643.306:69283): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928643.320:69284): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928643.320:69285): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928643.322:69286): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487815 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928643.382:69287): pid=487830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928643.382:69288): pid=487830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776B73616165646674676F69646D756E75746B696A6C6975757A6A73767A7569203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383634332E313331343636392D36313730302D39373136373933313835363432312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928643.384:69289): pid=487830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928643.387:69290): pid=487830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928643.707:69291): prog-id=2493 op=LOAD type=SYSCALL msg=audit(1764928643.707:69291): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe038cb470 a2=90 a3=9500000000 items=0 ppid=487847 pid=487848 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928643.707:69291): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393634346663396565643830366534333765666161363032343339343436 type=BPF msg=audit(1764928644.180:69292): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928644.299:69293): pid=487830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928644.299:69294): pid=487830 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928644.304:69295): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928644.304:69296): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928644.321:69297): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928644.321:69298): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928644.323:69299): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487887 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928644.357:69300): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928644.357:69301): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928645.700:69302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928645.930:69303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928653.215:69304): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928653.215:69305): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928653.218:69306): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487937 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928653.252:69307): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928653.252:69308): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928653.267:69309): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928653.267:69310): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928653.268:69311): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487950 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928653.308:69312): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928653.308:69313): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928653.330:69314): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928653.330:69315): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928653.331:69316): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487969 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928653.380:69317): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928653.380:69318): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928653.397:69319): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928653.397:69320): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928653.398:69321): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487982 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928653.429:69322): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928653.429:69323): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928653.448:69324): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928653.448:69325): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928653.450:69326): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=487996 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928653.515:69327): pid=488011 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928653.516:69328): pid=488011 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746F7268677A6E756176626E6A6F6A786664616174796B646F666170626F7070203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383635332E323535343035342D36313732362D3138313936323033353530383836312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928653.518:69329): pid=488011 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928653.523:69330): pid=488011 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928654.795:69331): prog-id=2494 op=LOAD type=SYSCALL msg=audit(1764928654.795:69331): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdaffb4120 a2=90 a3=9500000000 items=0 ppid=488028 pid=488029 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928654.795:69331): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666437356362386434303561643334306661616461343265363065626561 type=BPF msg=audit(1764928655.675:69332): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928655.789:69333): pid=488011 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928655.789:69334): pid=488011 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928655.795:69335): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928655.795:69336): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928655.812:69337): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928655.812:69338): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928655.813:69339): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488068 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928655.847:69340): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928655.847:69341): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928655.878:69342): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928655.878:69343): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928655.879:69344): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488082 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928655.911:69345): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928655.912:69346): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928655.924:69347): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928655.924:69348): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928655.926:69349): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488095 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928655.964:69350): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928655.964:69351): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928655.982:69352): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928655.982:69353): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928655.983:69354): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488114 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928656.040:69355): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928656.040:69356): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928656.054:69357): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928656.054:69358): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928656.055:69359): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488127 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928656.089:69360): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928656.089:69361): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928656.106:69362): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928656.107:69363): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928656.108:69364): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488141 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928656.174:69365): pid=488156 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928656.174:69366): pid=488156 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7975676F6A6279676F636B756D74706C70656E64716C7367676E6474796A6E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383635352E3931343539392D36313732362D35333433303735373836303030302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928656.175:69367): pid=488156 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928656.179:69368): pid=488156 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928656.427:69369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928656.464:69370): prog-id=2495 op=LOAD type=SYSCALL msg=audit(1764928656.464:69370): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff22ce91b0 a2=90 a3=9500000000 items=0 ppid=488174 pid=488175 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928656.464:69370): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F336162646532326562336533333830356236333031306139653734363164 type=SERVICE_STOP msg=audit(1764928656.559:69371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928656.941:69372): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928657.054:69373): pid=488156 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928657.055:69374): pid=488156 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928657.060:69375): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928657.060:69376): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928657.078:69377): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928657.078:69378): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928657.080:69379): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488231 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928657.110:69380): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928657.110:69381): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928657.139:69382): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928657.140:69383): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928657.141:69384): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488245 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928657.171:69385): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928657.171:69386): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928657.185:69387): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928657.185:69388): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928657.187:69389): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488258 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928657.221:69390): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928657.222:69391): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928657.242:69392): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928657.242:69393): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928657.243:69394): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488277 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928657.287:69395): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928657.287:69396): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928657.302:69397): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928657.302:69398): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928657.303:69399): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488290 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928657.337:69400): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928657.337:69401): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928657.358:69402): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928657.359:69403): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928657.361:69404): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488304 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928657.427:69405): pid=488319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928657.427:69406): pid=488319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6E6D6E73786E687271706C7A68687762756877627077616F776C757A6F6570203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383635372E313732383231352D36313732362D3130333336353834353139353339332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928657.428:69407): pid=488319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928657.434:69408): pid=488319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928657.753:69409): prog-id=2496 op=LOAD type=SYSCALL msg=audit(1764928657.753:69409): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc2120c700 a2=90 a3=9500000000 items=0 ppid=488338 pid=488339 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928657.753:69409): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376363616131336666393036376265316564626364343666616235303362 type=BPF msg=audit(1764928658.309:69410): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928658.444:69411): pid=488319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928658.445:69412): pid=488319 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928658.451:69413): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928658.451:69414): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928658.466:69415): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928658.466:69416): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928658.467:69417): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488378 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928658.502:69418): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928658.503:69419): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928664.017:69420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928664.360:69421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928665.016:69422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928665.020:69423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928665.024:69424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928665.028:69425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928665.033:69426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928665.338:69427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928665.343:69428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928665.497:69429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928665.519:69430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928665.582:69431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928670.198:69432): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928670.198:69433): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928670.200:69434): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488569 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928670.236:69435): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928670.236:69436): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928670.248:69437): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928670.248:69438): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928670.250:69439): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488582 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928670.288:69440): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928670.288:69441): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928670.310:69442): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928670.310:69443): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928670.311:69444): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488601 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928670.358:69445): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928670.358:69446): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928670.372:69447): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928670.372:69448): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928670.373:69449): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488614 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928670.405:69450): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928670.405:69451): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928670.419:69452): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928670.419:69453): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928670.421:69454): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488628 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928670.479:69455): pid=488643 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928670.479:69456): pid=488643 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79637472716F63656C767A7771686363627A7979666E79647A6F6B636E747A71203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383637302E323338343433392D36313736352D39383837333437323732383634342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928670.479:69457): pid=488643 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928670.484:69458): pid=488643 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928670.842:69459): prog-id=2497 op=LOAD type=SYSCALL msg=audit(1764928670.842:69459): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda69aacd0 a2=90 a3=9500000000 items=0 ppid=488660 pid=488661 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928670.842:69459): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326230303533316334336263376465393030356463306161306566376165 type=BPF msg=audit(1764928671.298:69460): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928671.574:69461): pid=488643 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928671.575:69462): pid=488643 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928671.580:69463): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928671.580:69464): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928671.593:69465): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928671.593:69466): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928671.596:69467): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488698 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928671.633:69468): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928671.633:69469): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928671.710:69470): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928671.710:69471): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928671.712:69472): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488712 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928671.742:69473): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928671.742:69474): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928671.753:69475): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928671.754:69476): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928671.757:69477): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488725 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928671.790:69478): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928671.791:69479): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928671.808:69480): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928671.808:69481): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928671.810:69482): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488744 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928671.854:69483): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928671.855:69484): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928671.869:69485): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928671.869:69486): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928671.871:69487): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488757 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928671.900:69488): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928671.901:69489): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928671.916:69490): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928671.916:69491): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928671.919:69492): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488771 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928671.986:69493): pid=488786 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928671.987:69494): pid=488786 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777A70706A747365736D637A736E656977786B616E6276787165737771716178203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383637312E373433393134382D36313737342D38353332313233333732333730322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928671.988:69495): pid=488786 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928671.995:69496): pid=488786 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928672.329:69497): prog-id=2498 op=LOAD type=SYSCALL msg=audit(1764928672.329:69497): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffef5800f40 a2=90 a3=9500000000 items=0 ppid=488804 pid=488805 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928672.329:69497): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363732363039613737343366633163643164393337333130383866663136 type=BPF msg=audit(1764928672.828:69498): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928672.951:69499): pid=488786 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928672.951:69500): pid=488786 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928672.956:69501): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928672.956:69502): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928672.980:69503): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928672.980:69504): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928672.982:69505): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488842 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928673.048:69506): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928673.048:69507): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928676.014:69508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928676.196:69509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928679.898:69510): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928679.898:69511): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928679.901:69512): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488881 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928679.937:69513): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928679.938:69514): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928679.950:69515): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928679.951:69516): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928679.952:69517): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488894 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928679.992:69518): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928679.992:69519): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928680.015:69520): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928680.015:69521): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928680.017:69522): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488913 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928680.069:69523): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928680.069:69524): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928680.088:69525): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928680.088:69526): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928680.090:69527): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488926 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928680.124:69528): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928680.124:69529): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928680.150:69530): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928680.150:69531): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928680.153:69532): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=488940 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928680.224:69533): pid=488955 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928680.224:69534): pid=488955 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6D707A6A766761676371657A6D65786665737866787065657368677170746A203B20434550485F434F4E5441494E45525F494D4147453D72656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C617465737420434550485F434F4E5441494E45525F42494E4152593D706F646D616E20434550485F434F4E463D2F686F6D652F747269706C656F2D61646D696E2F636570685F636C69656E74202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383637392E393339393436342D36313835332D3136333532313437333237333730392F416E736962616C6C5A5F636570685F6D6B737065632E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928680.226:69535): pid=488955 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928680.231:69536): pid=488955 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928680.578:69537): prog-id=2499 op=LOAD type=SYSCALL msg=audit(1764928680.578:69537): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffce1412d60 a2=90 a3=9500000000 items=0 ppid=488972 pid=488973 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928680.578:69537): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373932323063306263323462376133633933306466643563646164346664 type=BPF msg=audit(1764928681.072:69538): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928681.183:69539): pid=488955 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928681.183:69540): pid=488955 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928681.188:69541): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928681.188:69542): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928681.204:69543): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928681.204:69544): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928681.206:69545): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489011 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928681.241:69546): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928681.241:69547): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928681.337:69548): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928681.337:69549): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928681.338:69550): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489025 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928681.372:69551): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928681.372:69552): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928681.386:69553): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928681.387:69554): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928681.388:69555): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489038 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928681.424:69556): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928681.424:69557): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928681.446:69558): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928681.447:69559): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928681.448:69560): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489057 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928681.492:69561): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928681.493:69562): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928681.514:69563): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928681.515:69564): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928681.516:69565): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489070 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928681.546:69566): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928681.546:69567): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928681.567:69568): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928681.567:69569): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928681.569:69570): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489084 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928681.624:69571): pid=489099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928681.624:69572): pid=489099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70736E62707268696D6B6B62716A74767778736C65626464677A77686B6A7861203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383638312E333734333036322D36313836342D3135303836303935323538313134302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928681.625:69573): pid=489099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928681.632:69574): pid=489099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928681.966:69575): prog-id=2500 op=LOAD type=SYSCALL msg=audit(1764928681.966:69575): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcce70dbf0 a2=90 a3=9500000000 items=0 ppid=489116 pid=489117 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928681.966:69575): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653637643631336165323332396438303634623762343166316338666438 type=BPF msg=audit(1764928682.541:69576): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928682.642:69577): pid=489099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928682.643:69578): pid=489099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928682.648:69579): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928682.648:69580): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928682.661:69581): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928682.661:69582): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928682.664:69583): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489155 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928682.696:69584): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928682.696:69585): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928682.819:69586): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928682.819:69587): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928682.821:69588): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489169 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928682.856:69589): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928682.857:69590): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928682.875:69591): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928682.876:69592): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928682.877:69593): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489182 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928682.916:69594): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928682.916:69595): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928682.938:69596): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928682.938:69597): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928682.940:69598): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489201 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928682.986:69599): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928682.986:69600): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928683.003:69601): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928683.003:69602): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928683.005:69603): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489214 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928683.038:69604): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928683.039:69605): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928683.053:69606): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928683.053:69607): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928683.055:69608): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489228 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928683.112:69609): pid=489243 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928683.112:69610): pid=489243 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61777963697A756671786D73656A64766973797163696B717465787065676566203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383638322E383539313632382D36313837332D39303936373636373931313835352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928683.114:69611): pid=489243 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928683.117:69612): pid=489243 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928683.425:69613): prog-id=2501 op=LOAD type=SYSCALL msg=audit(1764928683.425:69613): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd234ef640 a2=90 a3=9500000000 items=0 ppid=489260 pid=489261 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928683.425:69613): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393735643630646238306637633735306139323866333562303037636164 type=BPF msg=audit(1764928685.504:69614): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928685.632:69615): pid=489243 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928685.632:69616): pid=489243 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928685.637:69617): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928685.637:69618): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928685.652:69619): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928685.652:69620): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928685.654:69621): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489299 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928685.689:69622): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928685.689:69623): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928687.013:69624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928687.186:69625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928690.393:69626): pid=489331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928690.655:69627): pid=489330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=489331 suid=74 rport=33744 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928690.655:69628): pid=489330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=489331 suid=74 rport=33744 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928692.502:69629): pid=489330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=489331 suid=74 rport=33744 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928692.503:69630): pid=489330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489331 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928692.504:69631): pid=489330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928692.504:69632): pid=489330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928692.504:69633): pid=489330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928694.684:69634): pid=489333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489333 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928694.763:69635): pid=489332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=489333 suid=74 rport=53672 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928694.763:69636): pid=489332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=489333 suid=74 rport=53672 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928695.016:69637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928695.106:69638): pid=489332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=489333 suid=74 rport=53672 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928695.106:69639): pid=489332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489333 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928695.107:69640): pid=489332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928695.108:69641): pid=489332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928695.108:69642): pid=489332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928695.270:69643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928695.907:69644): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928695.907:69645): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928695.910:69646): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489365 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928695.944:69647): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928695.945:69648): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928695.957:69649): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928695.957:69650): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928695.958:69651): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489378 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928695.997:69652): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928695.998:69653): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928696.017:69654): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928696.018:69655): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928696.025:69656): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489398 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_START msg=audit(1764928696.026:69657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928696.030:69658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928696.034:69659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928696.038:69660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928696.042:69661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928696.081:69662): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928696.081:69663): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928696.098:69664): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928696.098:69665): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928696.099:69666): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489462 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928696.135:69667): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928696.135:69668): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928696.153:69669): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928696.153:69670): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928696.155:69671): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489499 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928696.222:69672): pid=489533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928696.223:69673): pid=489533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69696C6871676869736F756C726E7A6C636F756E6D7573626E6475776F656A67203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383639352E393436373333352D36313838372D3235373832333836393133383435372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928696.225:69674): pid=489533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928696.229:69675): pid=489533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928696.266:69676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928696.397:69677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928696.416:69678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928696.536:69679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928696.585:69680): prog-id=2502 op=LOAD type=SYSCALL msg=audit(1764928696.585:69680): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc2bd8f8a0 a2=90 a3=9500000000 items=0 ppid=489635 pid=489636 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928696.585:69680): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346265336336636530313332323537666130666637306138643138613231 type=SERVICE_STOP msg=audit(1764928696.586:69681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928700.079:69682): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928700.191:69683): pid=489533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928700.192:69684): pid=489533 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928700.198:69685): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928700.198:69686): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928700.217:69687): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928700.217:69688): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928700.218:69689): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489675 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928700.256:69690): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928700.256:69691): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928704.611:69692): pid=489690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928704.863:69693): pid=489689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=489690 suid=74 rport=38478 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928704.863:69694): pid=489689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=489690 suid=74 rport=38478 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928707.017:69695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928707.252:69696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928709.289:69697): pid=489717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928709.536:69698): pid=489716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=489717 suid=74 rport=10648 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928709.536:69699): pid=489716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=489717 suid=74 rport=10648 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_LOGIN msg=audit(1764928710.366:69700): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928710.366:69701): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928710.368:69702): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489718 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928710.402:69703): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928710.402:69704): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928710.416:69705): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928710.417:69706): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928710.418:69707): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489734 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928710.455:69708): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928710.455:69709): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928710.474:69710): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928710.475:69711): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928710.476:69712): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489753 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928710.525:69713): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928710.526:69714): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928710.538:69715): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928710.538:69716): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928710.539:69717): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489766 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928710.574:69718): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928710.575:69719): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928710.592:69720): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928710.592:69721): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928710.621:69722): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489780 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928710.691:69723): pid=489795 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928710.692:69724): pid=489795 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736363736C6C726E657A6C696A776C6262786B6B72797673646D697074767A67203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383731302E3430343637372D36313839392D3230393833343431343535303431392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928710.694:69725): pid=489795 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928710.700:69726): pid=489795 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928710.905:69727): pid=489716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=489717 suid=74 rport=10648 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928710.906:69728): pid=489716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489717 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928710.907:69729): pid=489716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928710.907:69730): pid=489716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928710.907:69731): pid=489716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1764928711.312:69732): prog-id=2503 op=LOAD type=SYSCALL msg=audit(1764928711.312:69732): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd2213ff20 a2=90 a3=9500000000 items=0 ppid=489813 pid=489814 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928711.312:69732): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366265643335623065363665333730316337333966313531333034643633 type=BPF msg=audit(1764928714.862:69733): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928714.993:69734): pid=489795 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928714.993:69735): pid=489795 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928714.998:69736): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928714.999:69737): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928715.025:69738): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928715.025:69739): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928715.027:69740): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489854 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928715.064:69741): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928715.064:69742): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928715.152:69743): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928715.152:69744): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928715.153:69745): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489868 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928715.187:69746): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928715.187:69747): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928715.201:69748): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928715.201:69749): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928715.202:69750): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489881 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928715.242:69751): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928715.242:69752): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928715.264:69753): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928715.264:69754): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928715.265:69755): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489900 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928715.314:69756): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928715.315:69757): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928715.327:69758): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928715.327:69759): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928715.329:69760): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489913 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928715.362:69761): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928715.362:69762): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928715.381:69763): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928715.381:69764): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928715.383:69765): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489927 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928715.449:69766): pid=489942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928715.450:69767): pid=489942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71757A646B6C61746D636E796E6861616C7A69736573756B6A636177706B6770203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383731352E313839343233382D36313930392D34343736363531323833393531382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928715.452:69768): pid=489942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928715.456:69769): pid=489942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928715.861:69770): prog-id=2504 op=LOAD type=SYSCALL msg=audit(1764928715.861:69770): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdcd9c8260 a2=90 a3=9500000000 items=0 ppid=489959 pid=489960 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928715.861:69770): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613533383835346561643831646462343233386661366161653835656339 type=CRYPTO_KEY_USER msg=audit(1764928716.590:69771): pid=489689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=489690 suid=74 rport=38478 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928716.590:69772): pid=489689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489690 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928716.592:69773): pid=489689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.163.234 addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928716.593:69774): pid=489689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=489689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928716.593:69775): pid=489689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928718.012:69776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928718.163:69777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928719.628:69778): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928719.764:69779): pid=489942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928719.764:69780): pid=489942 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928719.771:69781): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928719.771:69782): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928719.793:69783): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928719.793:69784): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928719.795:69785): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490016 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928719.830:69786): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928719.831:69787): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928720.105:69788): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928720.105:69789): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928720.107:69790): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490030 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928720.140:69791): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928720.140:69792): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928720.157:69793): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928720.157:69794): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928720.158:69795): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490043 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928720.200:69796): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928720.200:69797): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928720.221:69798): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928720.221:69799): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928720.223:69800): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490062 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928720.272:69801): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928720.273:69802): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928720.285:69803): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928720.285:69804): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928720.287:69805): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490075 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928720.322:69806): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928720.322:69807): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928720.343:69808): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928720.343:69809): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928720.345:69810): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490089 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928720.421:69811): pid=490104 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928720.421:69812): pid=490104 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7472747565786C64726F78716B6378756866776D6E78627A6770626E677A6E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383732302E313433373333352D36313932342D3136303331353430333738343639362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928720.422:69813): pid=490104 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928720.429:69814): pid=490104 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928720.733:69815): prog-id=2505 op=LOAD type=SYSCALL msg=audit(1764928720.733:69815): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff29ed7050 a2=90 a3=9500000000 items=0 ppid=490123 pid=490124 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928720.733:69815): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343634396533343034663562353265363238653232656434646431656138 type=BPF msg=audit(1764928721.347:69816): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928721.423:69817): pid=490104 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928721.423:69818): pid=490104 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928721.428:69819): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928721.428:69820): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928721.444:69821): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928721.444:69822): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928721.446:69823): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490163 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928721.471:69824): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928721.471:69825): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928726.014:69826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928726.248:69827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928727.016:69828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928727.020:69829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928727.025:69830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928727.029:69831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928727.034:69832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928727.291:69833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928727.412:69834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928727.425:69835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928727.585:69836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928727.682:69837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928731.591:69838): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928731.591:69839): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928731.592:69840): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490354 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928731.626:69841): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928731.626:69842): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928731.639:69843): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928731.639:69844): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928731.641:69845): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490367 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928731.677:69846): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928731.677:69847): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928731.697:69848): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928731.697:69849): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928731.698:69850): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490386 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928731.747:69851): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928731.747:69852): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928731.764:69853): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928731.764:69854): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928731.766:69855): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490399 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928731.809:69856): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928731.809:69857): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928731.821:69858): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928731.821:69859): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928731.822:69860): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490412 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928731.852:69861): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928731.852:69862): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928731.867:69863): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928731.867:69864): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928731.868:69865): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490426 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928731.924:69866): pid=490441 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928731.925:69867): pid=490441 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928731.926:69868): pid=490441 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928731.932:69869): pid=490441 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928732.130:69870): pid=490441 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928732.131:69871): pid=490441 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928732.136:69872): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928732.136:69873): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1764928732.457:69874): prog-id=2506 op=LOAD type=SYSCALL msg=audit(1764928732.457:69874): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffde5e477b0 a2=90 a3=9500000000 items=0 ppid=490464 pid=490465 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928732.457:69874): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F396262333764303730373838336238323138326462396637623833336164 type=BPF msg=audit(1764928732.909:69875): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1764928733.153:69876): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928733.153:69877): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928733.155:69878): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490504 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928733.184:69879): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928733.184:69880): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928733.196:69881): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928733.197:69882): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928733.198:69883): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490517 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928733.227:69884): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928733.227:69885): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928733.239:69886): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928733.239:69887): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928733.240:69888): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490530 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928733.268:69889): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928733.268:69890): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928733.285:69891): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928733.285:69892): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928733.287:69893): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490549 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928733.334:69894): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928733.334:69895): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928733.349:69896): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928733.349:69897): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928733.351:69898): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490562 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928733.380:69899): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928733.381:69900): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928733.396:69901): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928733.396:69902): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928733.398:69903): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490576 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928733.452:69904): pid=490591 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928733.453:69905): pid=490591 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6766716A6C6B66646B6C66626D667370696474677968766B686F6E6F6E7A7172203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383733332E3232383835342D36313933362D33303130313836363539303834352F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928733.453:69906): pid=490591 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928733.457:69907): pid=490591 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928733.650:69908): pid=490591 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928733.650:69909): pid=490591 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928733.654:69910): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928733.655:69911): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928733.670:69912): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928733.670:69913): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928733.672:69914): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490594 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928733.705:69915): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928733.705:69916): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928733.722:69917): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928733.722:69918): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928733.724:69919): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490607 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928733.774:69920): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928733.774:69921): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928733.787:69922): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928733.787:69923): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928733.789:69924): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490620 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928733.819:69925): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928733.819:69926): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928733.832:69927): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928733.833:69928): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928733.834:69929): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490634 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928733.902:69930): pid=490649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928733.902:69931): pid=490649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6970757162767975636B69687066786A7672626875746C796169756270717178203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383733332E3232383835342D36313933362D33303130313836363539303834352F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928733.903:69932): pid=490649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928733.906:69933): pid=490649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928734.088:69934): pid=490649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928734.088:69935): pid=490649 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928734.093:69936): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928734.093:69937): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928734.105:69938): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928734.105:69939): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928734.107:69940): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490652 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928734.142:69941): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928734.142:69942): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928734.281:69943): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928734.282:69944): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928734.283:69945): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490666 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928734.316:69946): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928734.316:69947): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928734.330:69948): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928734.330:69949): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928734.332:69950): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490679 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928734.372:69951): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928734.372:69952): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928734.389:69953): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928734.389:69954): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928734.391:69955): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490698 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928734.438:69956): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928734.438:69957): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928734.451:69958): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928734.451:69959): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928734.453:69960): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490711 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928734.486:69961): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928734.486:69962): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928734.500:69963): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928734.500:69964): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928734.502:69965): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490725 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928734.567:69966): pid=490740 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928734.567:69967): pid=490740 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928734.568:69968): pid=490740 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928734.572:69969): pid=490740 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928734.978:69970): prog-id=2507 op=LOAD type=SYSCALL msg=audit(1764928734.978:69970): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda420ada0 a2=90 a3=9500000000 items=0 ppid=490758 pid=490759 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928734.978:69970): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313236623663653963653531373262313437653332306630653962356261 type=BPF msg=audit(1764928735.452:69971): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928735.586:69972): pid=490740 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928735.586:69973): pid=490740 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928735.591:69974): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928735.591:69975): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928735.605:69976): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928735.605:69977): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928735.606:69978): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490798 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928735.639:69979): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928735.639:69980): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928735.769:69981): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928735.769:69982): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928735.771:69983): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490812 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928735.798:69984): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928735.799:69985): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928735.811:69986): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928735.811:69987): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928735.812:69988): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490825 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928735.848:69989): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928735.848:69990): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928735.868:69991): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928735.868:69992): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928735.869:69993): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490844 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928735.917:69994): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928735.917:69995): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928735.930:69996): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928735.930:69997): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928735.932:69998): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490857 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928735.963:69999): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928735.963:70000): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928735.977:70001): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928735.977:70002): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928735.979:70003): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490871 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928736.045:70004): pid=490886 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928736.045:70005): pid=490886 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626272787A6465737767776C6D6A636F67686A656B726D77696B6C666A777775203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383733352E383030353432342D36313937362D3138393632323534303535303030302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928736.046:70006): pid=490886 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928736.051:70007): pid=490886 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928736.360:70008): prog-id=2508 op=LOAD type=SYSCALL msg=audit(1764928736.360:70008): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffffc7f31a0 a2=90 a3=9500000000 items=0 ppid=490903 pid=490904 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928736.360:70008): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666262366136626638373534333962353234306135643565373462373863 type=BPF msg=audit(1764928736.889:70009): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928737.054:70010): pid=490886 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928737.054:70011): pid=490886 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928737.059:70012): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928737.059:70013): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928737.072:70014): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928737.072:70015): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928737.075:70016): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490944 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928737.111:70017): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928737.111:70018): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928737.425:70019): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928737.425:70020): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928737.427:70021): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490958 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928737.461:70022): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928737.461:70023): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928737.473:70024): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928737.474:70025): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928737.475:70026): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490971 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928737.512:70027): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928737.512:70028): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928737.530:70029): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928737.530:70030): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928737.532:70031): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=490990 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928737.580:70032): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928737.580:70033): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928737.594:70034): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928737.595:70035): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928737.596:70036): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491003 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928737.629:70037): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928737.629:70038): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928737.642:70039): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928737.643:70040): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928737.644:70041): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491017 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928737.711:70042): pid=491032 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928737.712:70043): pid=491032 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A62666C6561677562757272687A7A707576676C6B626E7578666775706E79203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383733372E343633353930392D36313939332D36333730323531393931363036312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928737.713:70044): pid=491032 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928737.718:70045): pid=491032 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928737.733:70046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928737.927:70047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928738.043:70048): prog-id=2509 op=LOAD type=SYSCALL msg=audit(1764928738.043:70048): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe87587630 a2=90 a3=9500000000 items=0 ppid=491072 pid=491073 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928738.043:70048): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303338336265323734613966303138353130383066353536356161363264 type=BPF msg=audit(1764928738.532:70049): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928738.663:70050): pid=491032 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928738.664:70051): pid=491032 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928738.670:70052): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928738.670:70053): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928738.691:70054): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928738.691:70055): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928738.695:70056): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491112 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928738.729:70057): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928738.729:70058): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928742.013:70059): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928742.014:70060): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928742.015:70061): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491126 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928742.049:70062): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928742.049:70063): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928742.061:70064): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928742.061:70065): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928742.063:70066): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491139 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928742.103:70067): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928742.103:70068): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928742.124:70069): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928742.125:70070): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928742.126:70071): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491158 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928742.170:70072): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928742.170:70073): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928742.183:70074): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928742.183:70075): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928742.185:70076): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491171 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928742.221:70077): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928742.221:70078): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928742.235:70079): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928742.235:70080): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928742.238:70081): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491185 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928742.303:70082): pid=491200 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928742.303:70083): pid=491200 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6E6D716E626A6863766C66667077697865746C676868707278776B61766A79203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383734322E303530373635332D36323035312D37373533313839333338343430392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928742.304:70084): pid=491200 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928742.309:70085): pid=491200 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928742.621:70086): prog-id=2510 op=LOAD type=SYSCALL msg=audit(1764928742.621:70086): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff64759b30 a2=90 a3=9500000000 items=0 ppid=491217 pid=491218 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928742.621:70086): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333261343038323938316166616461623066333362393662336232623934 type=BPF msg=audit(1764928746.179:70087): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928746.361:70088): pid=491200 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928746.361:70089): pid=491200 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928746.366:70090): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928746.366:70091): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928746.383:70092): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928746.384:70093): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928746.385:70094): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491257 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928746.419:70095): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928746.419:70096): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928746.757:70097): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928746.757:70098): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928746.759:70099): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491271 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928746.791:70100): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928746.791:70101): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928746.802:70102): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928746.802:70103): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928746.804:70104): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491284 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928746.838:70105): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928746.838:70106): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928746.862:70107): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928746.862:70108): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928746.863:70109): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491303 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928746.906:70110): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928746.906:70111): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928746.920:70112): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928746.920:70113): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928746.921:70114): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491316 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928746.948:70115): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928746.948:70116): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928746.965:70117): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928746.965:70118): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928746.967:70119): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491330 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928747.024:70120): pid=491345 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928747.025:70121): pid=491345 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6D736F61677778776D6F747676696D666F6C626A7270726D796165776D6C6D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383734362E373932373939372D36323037322D353532333633323438383839322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928747.025:70122): pid=491345 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928747.029:70123): pid=491345 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928747.357:70124): prog-id=2511 op=LOAD type=SYSCALL msg=audit(1764928747.357:70124): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc4f7f36a0 a2=90 a3=9500000000 items=0 ppid=491362 pid=491363 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928747.357:70124): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633763623337613535376238316233333262336231313864653231363362 type=BPF msg=audit(1764928747.904:70125): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928748.033:70126): pid=491345 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928748.034:70127): pid=491345 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928748.040:70128): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928748.040:70129): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928748.054:70130): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928748.054:70131): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928748.056:70132): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491403 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928748.090:70133): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928748.090:70134): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928748.263:70135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928748.421:70136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928751.709:70137): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928751.709:70138): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928751.712:70139): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491435 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928751.749:70140): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928751.749:70141): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928751.771:70142): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928751.771:70143): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928751.773:70144): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491448 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928751.817:70145): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928751.817:70146): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928751.836:70147): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928751.836:70148): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928751.838:70149): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491467 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928751.886:70150): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928751.886:70151): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928751.907:70152): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928751.908:70153): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928751.909:70154): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491480 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928751.947:70155): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928751.947:70156): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928751.972:70157): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928751.972:70158): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928751.974:70159): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491494 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928752.056:70160): pid=491509 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928752.056:70161): pid=491509 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D676F66697269697A63677A6D797068776D7275697965706F6761666C796673203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383735312E373533323830342D36323039392D3135303936383131373131383030322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928752.058:70162): pid=491509 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928752.063:70163): pid=491509 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928752.379:70164): prog-id=2512 op=LOAD type=SYSCALL msg=audit(1764928752.379:70164): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff76f3f840 a2=90 a3=9500000000 items=0 ppid=491527 pid=491528 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928752.379:70164): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373366646461663633646665353266393639643266653534663264646562 type=BPF msg=audit(1764928754.917:70165): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928755.043:70166): pid=491509 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928755.043:70167): pid=491509 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928755.049:70168): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928755.049:70169): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928755.071:70170): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928755.071:70171): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928755.073:70172): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491567 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928755.104:70173): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928755.104:70174): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928755.143:70175): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928755.143:70176): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928755.145:70177): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491581 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928755.175:70178): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928755.175:70179): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928755.191:70180): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928755.191:70181): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928755.192:70182): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491594 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928755.228:70183): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928755.228:70184): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928755.250:70185): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928755.250:70186): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928755.251:70187): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491613 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928755.296:70188): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928755.296:70189): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928755.312:70190): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928755.312:70191): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928755.313:70192): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491626 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928755.344:70193): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928755.344:70194): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928755.359:70195): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928755.359:70196): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928755.362:70197): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491640 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928755.421:70198): pid=491655 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928755.421:70199): pid=491655 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A75677565666670766C78656B73766E7967726A61646E6A6969706A636A6263203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383735352E3137383837332D36323039392D33303436343430303230333032332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928755.422:70200): pid=491655 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928755.426:70201): pid=491655 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928755.749:70202): prog-id=2513 op=LOAD type=SYSCALL msg=audit(1764928755.749:70202): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff33816370 a2=90 a3=9500000000 items=0 ppid=491672 pid=491673 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928755.749:70202): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346336356461633031626565336530353038333563653030633265646331 type=BPF msg=audit(1764928756.275:70203): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1764928756.276:70204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928756.416:70205): pid=491655 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928756.416:70206): pid=491655 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928756.422:70207): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928756.422:70208): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928756.439:70209): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928756.439:70210): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928756.442:70211): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491737 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928756.480:70212): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928756.480:70213): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928756.524:70214): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928756.524:70215): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928756.526:70216): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491776 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928756.558:70217): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928756.558:70218): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928756.575:70219): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928756.575:70220): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928756.577:70221): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491799 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928756.612:70222): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928756.612:70223): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928756.619:70224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928756.636:70225): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928756.637:70226): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928756.638:70227): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491820 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928756.691:70228): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928756.691:70229): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928756.712:70230): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928756.712:70231): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928756.714:70232): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491833 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928756.749:70233): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928756.750:70234): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928756.766:70235): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928756.766:70236): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928756.768:70237): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=491847 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928756.841:70238): pid=491862 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928756.841:70239): pid=491862 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6167756C62686C67626B786B737866717A6D6861647276686165627677787468203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383735362E3536303837372D36323039392D3137333634333433333432323737392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928756.842:70240): pid=491862 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928756.848:70241): pid=491862 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928757.139:70242): prog-id=2514 op=LOAD type=SYSCALL msg=audit(1764928757.139:70242): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff08eaac40 a2=90 a3=9500000000 items=0 ppid=491879 pid=491880 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928757.139:70242): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316333643837323131636535616238633466326364373031326137313333 type=BPF msg=audit(1764928757.608:70243): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1764928757.609:70244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928757.613:70245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928757.617:70246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928757.621:70247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928757.713:70248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928758.000:70249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928758.028:70250): pid=491862 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928758.029:70251): pid=491862 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928758.032:70252): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928758.033:70253): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928758.051:70254): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928758.051:70255): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928758.053:70256): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492049 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928758.061:70257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928758.079:70258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928758.086:70259): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928758.086:70260): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928758.160:70261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928758.273:70262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928766.469:70263): pid=492072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928766.734:70264): pid=492071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=492072 suid=74 rport=58818 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928766.734:70265): pid=492071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=492072 suid=74 rport=58818 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928767.047:70266): pid=492074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764928768.011:70267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928768.204:70268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928769.579:70269): pid=492071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=492072 suid=74 rport=58818 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928769.579:70270): pid=492071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492072 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928769.580:70271): pid=492071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928769.580:70272): pid=492071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928769.580:70273): pid=492071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928769.873:70274): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928769.873:70275): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928769.876:70276): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492100 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928769.909:70277): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928769.909:70278): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928769.920:70279): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928769.920:70280): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928769.922:70281): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492113 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928769.960:70282): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928769.960:70283): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928769.983:70284): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928769.983:70285): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928769.984:70286): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492132 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=CRYPTO_SESSION msg=audit(1764928770.000:70287): pid=492073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=492074 suid=74 rport=49616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928770.000:70288): pid=492073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=492074 suid=74 rport=49616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928770.007:70289): pid=492073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=492074 suid=74 rport=49616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928770.008:70290): pid=492073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492074 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928770.008:70291): pid=492073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928770.008:70292): pid=492073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.78.225.21 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1764928770.027:70293): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928770.027:70294): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928770.043:70295): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928770.043:70296): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928770.044:70297): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492145 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928770.074:70298): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928770.074:70299): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928770.098:70300): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928770.098:70301): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928770.100:70302): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492159 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928770.176:70303): pid=492174 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928770.176:70304): pid=492174 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626F617A646C657A7370686D79796C6B6279706D746668776E6D636874626E68203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383736392E393130393836322D36323133382D3236353637383535373031303739372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928770.178:70305): pid=492174 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928770.183:70306): pid=492174 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928770.530:70307): prog-id=2515 op=LOAD type=SYSCALL msg=audit(1764928770.530:70307): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc792c6ae0 a2=90 a3=9500000000 items=0 ppid=492191 pid=492192 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928770.530:70307): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393232363532326362653464623636313530396537363966623163343734 type=BPF msg=audit(1764928770.977:70308): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928771.091:70309): pid=492174 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928771.092:70310): pid=492174 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928771.098:70311): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928771.098:70312): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928771.111:70313): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928771.111:70314): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928771.112:70315): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492230 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928771.151:70316): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928771.151:70317): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928771.247:70318): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928771.247:70319): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928771.250:70320): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492244 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928771.281:70321): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928771.282:70322): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928771.294:70323): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928771.294:70324): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928771.295:70325): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492257 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928771.332:70326): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928771.332:70327): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928771.350:70328): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928771.350:70329): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928771.352:70330): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492276 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928771.404:70331): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928771.404:70332): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928771.420:70333): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928771.420:70334): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928771.422:70335): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492289 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928771.456:70336): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928771.456:70337): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928771.471:70338): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928771.471:70339): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928771.473:70340): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492303 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928771.536:70341): pid=492318 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928771.536:70342): pid=492318 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77676B6468646264776F7478706F73776468626D6D72656B656E676863656E73203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383737312E323833353336322D36323134372D3138323630363834333335333531302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928771.537:70343): pid=492318 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928771.541:70344): pid=492318 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928771.848:70345): prog-id=2516 op=LOAD type=SYSCALL msg=audit(1764928771.848:70345): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdebf39e40 a2=90 a3=9500000000 items=0 ppid=492335 pid=492336 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928771.848:70345): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646161613862326636323463376234623138643839333662626264656366 type=BPF msg=audit(1764928772.313:70346): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928772.453:70347): pid=492318 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928772.454:70348): pid=492318 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928772.458:70349): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928772.459:70350): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928772.477:70351): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928772.477:70352): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928772.479:70353): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492375 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928772.514:70354): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928772.514:70355): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928779.010:70356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928779.143:70357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928779.240:70358): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928779.240:70359): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928779.242:70360): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492410 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928779.273:70361): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928779.273:70362): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928779.295:70363): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928779.295:70364): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928779.296:70365): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492423 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928779.332:70366): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928779.332:70367): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928779.355:70368): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928779.355:70369): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928779.356:70370): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492442 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928779.409:70371): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928779.409:70372): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928779.428:70373): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928779.428:70374): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928779.429:70375): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492455 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928779.461:70376): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928779.461:70377): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928779.480:70378): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928779.480:70379): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928779.482:70380): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492469 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928779.547:70381): pid=492484 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928779.547:70382): pid=492484 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928779.548:70383): pid=492484 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928779.554:70384): pid=492484 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928779.905:70385): prog-id=2517 op=LOAD type=SYSCALL msg=audit(1764928779.905:70385): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe2c3ce9a0 a2=90 a3=9500000000 items=0 ppid=492501 pid=492502 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928779.905:70385): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393339313961333531383966383461643134376339323537656461636632 type=BPF msg=audit(1764928780.412:70386): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928780.539:70387): pid=492484 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928780.539:70388): pid=492484 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928780.544:70389): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928780.544:70390): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928780.562:70391): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928780.562:70392): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928780.565:70393): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492540 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928780.600:70394): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928780.601:70395): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928780.707:70396): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928780.707:70397): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928780.709:70398): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492554 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928780.742:70399): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928780.742:70400): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928780.755:70401): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928780.756:70402): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928780.757:70403): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492567 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928780.793:70404): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928780.793:70405): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928780.811:70406): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928780.812:70407): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928780.813:70408): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492586 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928780.862:70409): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928780.863:70410): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928780.877:70411): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928780.877:70412): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928780.878:70413): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492599 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928780.913:70414): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928780.913:70415): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928780.928:70416): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928780.928:70417): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928780.930:70418): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492613 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928780.996:70419): pid=492628 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928780.997:70420): pid=492628 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6A76736F76617A636178686663706B696B676566616B667270757068687971203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383738302E373434373134332D36323233372D3133373530303536353834383630342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928780.999:70421): pid=492628 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928781.003:70422): pid=492628 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928781.337:70423): prog-id=2518 op=LOAD type=SYSCALL msg=audit(1764928781.337:70423): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc3799fbe0 a2=90 a3=9500000000 items=0 ppid=492646 pid=492647 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928781.337:70423): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663638353566633364393562626438356434343162363433346161336266 type=BPF msg=audit(1764928781.780:70424): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928781.891:70425): pid=492628 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928781.891:70426): pid=492628 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928781.895:70427): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928781.895:70428): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928781.916:70429): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928781.916:70430): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928781.918:70431): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492685 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928781.951:70432): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928781.951:70433): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928782.057:70434): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928782.058:70435): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928782.060:70436): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492699 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928782.089:70437): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928782.089:70438): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928782.103:70439): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928782.103:70440): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928782.106:70441): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492712 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928782.133:70442): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928782.134:70443): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928782.158:70444): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928782.159:70445): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928782.160:70446): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492731 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928782.205:70447): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928782.205:70448): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928782.227:70449): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928782.228:70450): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928782.229:70451): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492744 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928782.270:70452): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928782.270:70453): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928782.291:70454): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928782.291:70455): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928782.293:70456): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492758 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928782.365:70457): pid=492773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928782.366:70458): pid=492773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68726175716C627272717074667964767463636C68666464686B696267796367203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383738322E303931373937382D36323234362D38303336363331363834323934382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928782.367:70459): pid=492773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928782.373:70460): pid=492773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928782.694:70461): prog-id=2519 op=LOAD type=SYSCALL msg=audit(1764928782.694:70461): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc7fcb0db0 a2=90 a3=9500000000 items=0 ppid=492790 pid=492791 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928782.694:70461): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643464353736636664656437656631366535383033633737656430356433 type=BPF msg=audit(1764928784.794:70462): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928784.934:70463): pid=492773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928784.934:70464): pid=492773 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928784.940:70465): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928784.940:70466): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928784.952:70467): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928784.952:70468): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928784.955:70469): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=492830 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928784.989:70470): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928784.989:70471): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928787.014:70472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928787.292:70473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928789.019:70474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928789.023:70475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928789.029:70476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928789.035:70477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928789.041:70478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928789.307:70479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928789.401:70480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928789.457:70481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928789.496:70482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928789.507:70483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928790.558:70484): pid=493019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764928790.686:70485): pid=493020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928790.687:70486): pid=493017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=493020 suid=74 rport=58046 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928790.687:70487): pid=493017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=493020 suid=74 rport=58046 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928790.810:70488): pid=493018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=493019 suid=74 rport=51796 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928790.810:70489): pid=493018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=493019 suid=74 rport=51796 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928792.179:70490): pid=493018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=493019 suid=74 rport=51796 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928792.180:70491): pid=493018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493019 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928792.180:70492): pid=493018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928792.181:70493): pid=493018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928792.181:70494): pid=493018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928792.826:70495): pid=493017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=493020 suid=74 rport=58046 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928792.826:70496): pid=493017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493020 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928792.827:70497): pid=493017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928792.827:70498): pid=493017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928792.828:70499): pid=493017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928793.326:70500): pid=493022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928793.327:70501): pid=493021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=493022 suid=74 rport=58376 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928793.327:70502): pid=493021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=493022 suid=74 rport=58376 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928794.943:70503): pid=493021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=493022 suid=74 rport=58376 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928794.943:70504): pid=493021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493022 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928794.944:70505): pid=493021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928794.945:70506): pid=493021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928794.945:70507): pid=493021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928795.139:70508): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928795.139:70509): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928795.141:70510): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493024 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928795.178:70511): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928795.178:70512): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928795.192:70513): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928795.192:70514): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928795.193:70515): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493037 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928795.235:70516): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928795.235:70517): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928795.254:70518): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928795.254:70519): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928795.256:70520): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493056 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928795.305:70521): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928795.305:70522): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928795.321:70523): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928795.321:70524): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928795.322:70525): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493069 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928795.356:70526): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928795.356:70527): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928795.374:70528): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928795.374:70529): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928795.376:70530): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493083 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928795.412:70531): pid=493098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928795.413:70532): pid=493023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=493098 suid=74 rport=58388 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928795.413:70533): pid=493023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=493098 suid=74 rport=58388 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ACCT msg=audit(1764928795.453:70534): pid=493099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928795.454:70535): pid=493099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636970796961646F766173686D71647279746E70626863797976746C72726874203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383739352E313739393236392D36323236302D36303132363935353733313638342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928795.456:70536): pid=493099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928795.462:70537): pid=493099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928795.816:70538): prog-id=2520 op=LOAD type=SYSCALL msg=audit(1764928795.816:70538): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc7d308bf0 a2=90 a3=9500000000 items=0 ppid=493117 pid=493118 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928795.816:70538): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373936396438343230353031613532636630376430653537316266626630 type=CRYPTO_KEY_USER msg=audit(1764928798.059:70539): pid=493023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=493098 suid=74 rport=58388 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928798.059:70540): pid=493023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493098 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928798.061:70541): pid=493023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928798.062:70542): pid=493023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928798.062:70543): pid=493023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928798.490:70544): pid=493143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928798.491:70545): pid=493142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=493143 suid=74 rport=58398 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928798.492:70546): pid=493142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=493143 suid=74 rport=58398 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928799.018:70547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928799.204:70548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928799.260:70549): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928799.391:70550): pid=493099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928799.391:70551): pid=493099 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928799.396:70552): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928799.396:70553): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928799.409:70554): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928799.409:70555): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928799.412:70556): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493185 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928799.450:70557): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928799.450:70558): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928800.420:70559): pid=493142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=493143 suid=74 rport=58398 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928800.421:70560): pid=493142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493143 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928800.422:70561): pid=493142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928800.422:70562): pid=493142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928800.422:70563): pid=493142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928800.902:70564): pid=493200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928800.904:70565): pid=493199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=493200 suid=74 rport=58406 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928800.904:70566): pid=493199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=493200 suid=74 rport=58406 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928802.610:70567): pid=493199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=493200 suid=74 rport=58406 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928802.610:70568): pid=493199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493200 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928802.611:70569): pid=493199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928802.612:70570): pid=493199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928802.612:70571): pid=493199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928809.565:70572): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928809.565:70573): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928809.566:70574): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493201 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928809.597:70575): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928809.597:70576): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928809.612:70577): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928809.612:70578): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928809.613:70579): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493214 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928809.645:70580): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928809.645:70581): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928809.664:70582): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928809.664:70583): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928809.665:70584): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493233 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928809.716:70585): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928809.716:70586): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928809.735:70587): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928809.735:70588): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928809.736:70589): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493246 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928809.769:70590): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928809.769:70591): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928809.789:70592): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928809.789:70593): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928809.791:70594): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493260 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928809.849:70595): pid=493275 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928809.849:70596): pid=493275 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626667756D656D6A766E7773736D666D6869797274757A747A6B7467796B6F66203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383830392E3539393839322D36323237322D3235393731323235353232333836352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928809.851:70597): pid=493275 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928809.870:70598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764928809.874:70599): pid=493275 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928810.031:70600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928810.193:70601): prog-id=2521 op=LOAD type=SYSCALL msg=audit(1764928810.193:70601): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc11375b20 a2=90 a3=9500000000 items=0 ppid=493311 pid=493312 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928810.193:70601): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333330666239376333636635373664643335616163626531666535636534 type=BPF msg=audit(1764928810.702:70602): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928810.823:70603): pid=493275 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928810.823:70604): pid=493275 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928810.827:70605): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928810.827:70606): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928810.845:70607): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928810.845:70608): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928810.848:70609): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493351 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928810.882:70610): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928810.882:70611): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928811.023:70612): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928811.024:70613): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928811.025:70614): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493365 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928811.055:70615): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928811.056:70616): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928811.068:70617): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928811.068:70618): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928811.070:70619): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493378 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928811.105:70620): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928811.105:70621): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928811.127:70622): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928811.127:70623): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928811.129:70624): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493397 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928811.171:70625): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928811.171:70626): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928811.192:70627): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928811.192:70628): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928811.194:70629): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493410 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928811.228:70630): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928811.229:70631): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928811.247:70632): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928811.247:70633): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928811.249:70634): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493424 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928811.322:70635): pid=493439 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928811.322:70636): pid=493439 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7072696C726F686F6F756D7766746E706B64616A66637963787A696762686F6C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383831312E303538303634322D36323238312D31373234383332343033393136372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928811.324:70637): pid=493439 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928811.329:70638): pid=493439 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928811.637:70639): prog-id=2522 op=LOAD type=SYSCALL msg=audit(1764928811.637:70639): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffac0c8c70 a2=90 a3=9500000000 items=0 ppid=493456 pid=493457 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928811.637:70639): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383663366536633237653230376631363162613439666565346237623438 type=BPF msg=audit(1764928812.394:70640): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928812.523:70641): pid=493439 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928812.523:70642): pid=493439 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928812.528:70643): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928812.528:70644): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928812.540:70645): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928812.540:70646): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928812.542:70647): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493495 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928812.575:70648): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928812.575:70649): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928812.769:70650): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928812.769:70651): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928812.770:70652): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493509 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928812.794:70653): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928812.794:70654): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928812.806:70655): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928812.806:70656): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928812.809:70657): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493522 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928812.843:70658): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928812.843:70659): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928812.902:70660): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928812.902:70661): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928812.903:70662): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493541 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928812.945:70663): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928812.945:70664): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928812.959:70665): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928812.959:70666): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928812.960:70667): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493554 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928812.993:70668): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928812.993:70669): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928813.009:70670): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928813.009:70671): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928813.012:70672): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493568 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928813.081:70673): pid=493583 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928813.082:70674): pid=493583 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64686D62716E6870786869706E67786D71687779756A67786C62757A73776A77203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383831322E3739363338322D36323239362D3230373235363836343230313531312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928813.083:70675): pid=493583 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928813.088:70676): pid=493583 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928813.427:70677): prog-id=2523 op=LOAD type=SYSCALL msg=audit(1764928813.427:70677): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd419a6830 a2=90 a3=9500000000 items=0 ppid=493601 pid=493602 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928813.427:70677): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613065326231316134633037643465366265363938316336346634333636 type=BPF msg=audit(1764928813.939:70678): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928814.049:70679): pid=493583 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928814.050:70680): pid=493583 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928814.054:70681): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928814.055:70682): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928814.069:70683): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928814.069:70684): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928814.071:70685): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493641 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928814.099:70686): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928814.099:70687): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928818.018:70688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928818.225:70689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928820.021:70690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928820.025:70691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928820.029:70692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928820.033:70693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928820.037:70694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928820.272:70695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928820.372:70696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928820.428:70697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928820.484:70698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928820.624:70699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928824.211:70700): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928824.211:70701): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928824.213:70702): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493864 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928824.246:70703): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928824.247:70704): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928824.259:70705): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928824.259:70706): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928824.260:70707): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493877 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928824.298:70708): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928824.298:70709): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928824.317:70710): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928824.317:70711): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928824.318:70712): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493896 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928824.358:70713): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928824.358:70714): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928824.375:70715): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928824.375:70716): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928824.376:70717): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493909 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928824.417:70718): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928824.417:70719): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928824.431:70720): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928824.431:70721): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928824.432:70722): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493922 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928824.459:70723): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928824.459:70724): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928824.477:70725): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928824.477:70726): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928824.480:70727): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493936 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928824.545:70728): pid=493951 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928824.546:70729): pid=493951 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786C766F79676F687A6171747A65666579616B66646865616B646B73696F7A65203B20414E5349424C455F4153594E435F4449523D277E2F2E616E7369626C655F6173796E6327202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383832342E323438383930322D36323330382D35373430313236323834363537342F6173796E635F777261707065722E7079206A3738343235313838303630203330202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383832342E323438383930322D36323330382D35373430313236323834363537342F416E736962616C6C5A5F636F6D6D616E642E7079205F exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928824.548:70730): pid=493951 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928824.554:70731): pid=493951 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928824.752:70732): pid=493951 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928824.753:70733): pid=493951 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928824.757:70734): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928824.758:70735): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1764928825.045:70736): prog-id=2524 op=LOAD type=SYSCALL msg=audit(1764928825.045:70736): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe4b17c030 a2=90 a3=9500000000 items=0 ppid=493974 pid=493975 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928825.045:70736): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363766306338656636333436643931323639623466376539636538366237 type=USER_LOGIN msg=audit(1764928825.786:70737): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928825.786:70738): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928825.788:70739): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=493988 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928825.821:70740): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928825.821:70741): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928825.846:70742): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928825.846:70743): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928825.847:70744): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494001 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928825.871:70745): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928825.871:70746): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928825.894:70747): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928825.895:70748): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928825.896:70749): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494014 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928825.928:70750): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928825.928:70751): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928825.954:70752): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928825.954:70753): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928825.955:70754): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494033 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928826.000:70755): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928826.000:70756): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928826.018:70757): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928826.018:70758): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928826.019:70759): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494046 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928826.048:70760): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928826.048:70761): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928826.067:70762): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928826.067:70763): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928826.069:70764): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494060 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928826.135:70765): pid=494075 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928826.136:70766): pid=494075 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677767697562637A6B6E686570757A7A7A78776379786D66756B6570656E6A72203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383832352E3837343234352D36323330382D3237333932333738373030363930392F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928826.138:70767): pid=494075 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928826.143:70768): pid=494075 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928826.323:70769): pid=494075 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928826.323:70770): pid=494075 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928826.328:70771): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928826.328:70772): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928826.731:70773): pid=494079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928826.811:70774): pid=494078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=494079 suid=74 rport=48322 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928826.811:70775): pid=494078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=494079 suid=74 rport=48322 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928827.158:70776): pid=494078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=494079 suid=74 rport=48322 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928827.159:70777): pid=494078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494079 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928827.160:70778): pid=494078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928827.160:70779): pid=494078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928827.160:70780): pid=494078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928827.345:70781): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928827.345:70782): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928827.347:70783): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494080 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928827.380:70784): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928827.380:70785): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928827.406:70786): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928827.406:70787): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928827.408:70788): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494093 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928827.461:70789): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928827.462:70790): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928827.476:70791): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928827.476:70792): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928827.478:70793): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494106 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928827.511:70794): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928827.511:70795): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928827.525:70796): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928827.525:70797): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928827.527:70798): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494120 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928827.591:70799): pid=494135 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928827.591:70800): pid=494135 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727A61796D656F7767716B756F6A7A656361796D7A6F68796261667571707076203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383832352E3837343234352D36323330382D3237333932333738373030363930392F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928827.592:70801): pid=494135 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928827.595:70802): pid=494135 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928827.771:70803): pid=494135 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928827.772:70804): pid=494135 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928827.777:70805): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928827.777:70806): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=BPF msg=audit(1764928828.524:70807): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1764928828.794:70808): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928828.794:70809): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928828.796:70810): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494164 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928828.834:70811): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928828.834:70812): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928828.852:70813): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928828.852:70814): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928828.853:70815): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494177 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928828.900:70816): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928828.900:70817): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928828.915:70818): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928828.915:70819): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928828.917:70820): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494190 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928828.955:70821): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928828.956:70822): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928828.973:70823): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928828.973:70824): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928828.975:70825): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494204 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928829.040:70826): pid=494219 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928829.040:70827): pid=494219 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C67717A63796F74717A737676736766626567707176697175706B6865676275203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383832352E3837343234352D36323330382D3237333932333738373030363930392F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928829.041:70828): pid=494219 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928829.049:70829): pid=494219 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928829.219:70830): pid=494219 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928829.219:70831): pid=494219 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928829.225:70832): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928829.225:70833): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928829.243:70834): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928829.243:70835): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928829.245:70836): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494222 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928829.278:70837): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928829.278:70838): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928829.296:70839): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928829.296:70840): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928829.298:70841): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494235 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928829.340:70842): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928829.340:70843): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928829.352:70844): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928829.353:70845): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928829.354:70846): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494248 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928829.386:70847): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928829.387:70848): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928829.401:70849): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928829.401:70850): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928829.403:70851): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494262 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928829.463:70852): pid=494277 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928829.464:70853): pid=494277 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71726570677367716E70776A7A7373686C636B7275636F6C6E64797564787962203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383832352E3837343234352D36323330382D3237333932333738373030363930392F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928829.465:70854): pid=494277 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928829.470:70855): pid=494277 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928829.480:70856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928829.642:70857): pid=494277 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928829.643:70858): pid=494277 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928829.647:70859): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928829.647:70860): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928829.659:70861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928829.660:70862): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928829.660:70863): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928829.662:70864): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494305 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928829.696:70865): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928829.696:70866): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928829.838:70867): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928829.838:70868): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928829.839:70869): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494319 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928829.873:70870): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928829.873:70871): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928829.886:70872): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928829.886:70873): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928829.887:70874): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494332 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928829.925:70875): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928829.925:70876): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928829.945:70877): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928829.945:70878): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928829.946:70879): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494351 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928829.997:70880): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928829.997:70881): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928830.010:70882): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928830.010:70883): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928830.011:70884): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494364 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928830.044:70885): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928830.044:70886): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928830.062:70887): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928830.063:70888): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928830.064:70889): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494378 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928830.125:70890): pid=494393 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928830.125:70891): pid=494393 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928830.126:70892): pid=494393 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928830.130:70893): pid=494393 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928830.467:70894): prog-id=2525 op=LOAD type=SYSCALL msg=audit(1764928830.467:70894): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcc1aa31e0 a2=90 a3=9500000000 items=0 ppid=494411 pid=494412 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928830.467:70894): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333037613837643163343566336531643132333766316638393839653761 type=BPF msg=audit(1764928830.950:70895): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928831.072:70896): pid=494393 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928831.073:70897): pid=494393 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928831.079:70898): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928831.079:70899): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928831.094:70900): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928831.094:70901): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928831.095:70902): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494451 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928831.125:70903): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928831.125:70904): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928831.265:70905): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928831.265:70906): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928831.266:70907): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494465 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928831.285:70908): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928831.285:70909): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928831.299:70910): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928831.299:70911): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928831.299:70912): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494478 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928831.331:70913): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928831.331:70914): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928831.351:70915): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928831.351:70916): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928831.352:70917): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494497 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928831.395:70918): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928831.395:70919): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928831.410:70920): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928831.410:70921): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928831.413:70922): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494510 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928831.442:70923): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928831.442:70924): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928831.455:70925): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928831.455:70926): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928831.456:70927): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494524 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928831.518:70928): pid=494539 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928831.518:70929): pid=494539 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C65677A686D776969686E66736A6C6B6577786B756A69637670747762696F69203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383833312E3238373434322D36323335382D34313439323834393831333237372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928831.520:70930): pid=494539 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928831.525:70931): pid=494539 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928831.813:70932): prog-id=2526 op=LOAD type=SYSCALL msg=audit(1764928831.813:70932): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffff9c14990 a2=90 a3=9500000000 items=0 ppid=494556 pid=494557 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928831.813:70932): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633438623632336530376435323336653034343661356366393061366137 type=BPF msg=audit(1764928832.274:70933): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928832.343:70934): pid=494539 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928832.343:70935): pid=494539 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928832.347:70936): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928832.347:70937): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928832.361:70938): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928832.361:70939): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928832.363:70940): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494595 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928832.385:70941): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928832.385:70942): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928841.021:70943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928841.208:70944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928846.119:70945): pid=494633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928846.382:70946): pid=494632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=494633 suid=74 rport=41656 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928846.383:70947): pid=494632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=494633 suid=74 rport=41656 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928846.816:70948): pid=494612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764928849.008:70949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928849.254:70950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928850.667:70951): pid=494632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=494633 suid=74 rport=41656 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928850.667:70952): pid=494632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494633 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928850.668:70953): pid=494632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928850.669:70954): pid=494632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928850.669:70955): pid=494632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928850.693:70956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928850.697:70957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928850.701:70958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928850.708:70959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928850.713:70960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928850.985:70961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928850.996:70962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928851.167:70963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928851.253:70964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928851.303:70965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928859.775:70966): pid=494826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764928860.014:70967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928860.226:70968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1764928862.602:70969): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928862.602:70970): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928862.606:70971): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494863 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928862.645:70972): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928862.645:70973): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928862.657:70974): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928862.657:70975): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928862.659:70976): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494876 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928862.699:70977): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928862.699:70978): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928862.720:70979): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928862.720:70980): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928862.721:70981): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494895 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928862.767:70982): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928862.767:70983): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928862.781:70984): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928862.781:70985): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928862.782:70986): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494908 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928862.816:70987): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928862.816:70988): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928862.831:70989): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928862.831:70990): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928862.832:70991): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494922 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928862.900:70992): pid=494937 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928862.901:70993): pid=494937 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696879717972726A697A6273777A787A72627A6D6C64796C6A636C7061726961203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383836322E363437343734382D36323338332D3234303130303533343831303833352F416E736962616C6C5A5F66696E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928862.902:70994): pid=494937 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928862.908:70995): pid=494937 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928863.080:70996): pid=494937 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928863.080:70997): pid=494937 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928863.084:70998): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.084:70999): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.101:71000): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.101:71001): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.103:71002): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494940 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928863.135:71003): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.135:71004): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.199:71005): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.199:71006): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.201:71007): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494954 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928863.230:71008): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.230:71009): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.243:71010): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.243:71011): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.245:71012): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494967 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928863.287:71013): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.287:71014): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.307:71015): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.307:71016): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.309:71017): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494986 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928863.357:71018): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.357:71019): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.374:71020): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.374:71021): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.375:71022): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494999 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928863.410:71023): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.410:71024): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.424:71025): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.424:71026): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.426:71027): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495013 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928863.495:71028): pid=495028 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928863.495:71029): pid=495028 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A627076796A746767677A7866646D796D73737577756775766A7A72746B6D6D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383836332E323332323535352D36323339322D3234333931303134363534373135392F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928863.496:71030): pid=495028 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928863.499:71031): pid=495028 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928863.680:71032): pid=495028 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928863.680:71033): pid=495028 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928863.685:71034): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.685:71035): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.698:71036): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.698:71037): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.700:71038): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495031 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928863.733:71039): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.733:71040): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.757:71041): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.757:71042): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.759:71043): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495045 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928863.790:71044): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.791:71045): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.802:71046): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.802:71047): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.804:71048): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495058 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928863.839:71049): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.840:71050): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.856:71051): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.856:71052): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.858:71053): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495077 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928863.903:71054): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.904:71055): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.917:71056): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.917:71057): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.918:71058): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495090 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928863.951:71059): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928863.951:71060): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928863.966:71061): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928863.966:71062): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928863.968:71063): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495104 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928864.032:71064): pid=495119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928864.033:71065): pid=495119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74636F73676C726A677A64756279627A6576697578707A636571787479737269203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383836332E373932303532332D36323339322D32323636343435313935343934302F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928864.034:71066): pid=495119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928864.037:71067): pid=495119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928864.219:71068): pid=495119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928864.219:71069): pid=495119 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928864.223:71070): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928864.223:71071): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928864.236:71072): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928864.236:71073): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928864.238:71074): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495122 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928864.270:71075): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928864.270:71076): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928864.321:71077): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928864.321:71078): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928864.323:71079): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495136 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928864.351:71080): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928864.351:71081): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928864.365:71082): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928864.365:71083): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928864.367:71084): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495149 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928864.410:71085): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928864.410:71086): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928864.430:71087): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928864.430:71088): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928864.431:71089): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495168 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928864.478:71090): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928864.478:71091): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928864.493:71092): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928864.493:71093): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928864.495:71094): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495181 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928864.552:71095): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928864.553:71096): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928864.566:71097): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928864.566:71098): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928864.568:71099): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495195 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928864.782:71100): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928864.782:71101): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928864.799:71102): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928864.799:71103): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928864.800:71104): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495211 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928864.821:71105): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928864.821:71106): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928864.882:71107): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928864.882:71108): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928864.883:71109): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495225 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928864.904:71110): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928864.904:71111): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928864.916:71112): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928864.916:71113): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928864.918:71114): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495238 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928864.947:71115): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928864.947:71116): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928864.966:71117): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928864.966:71118): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928864.967:71119): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495257 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928865.008:71120): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928865.008:71121): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928865.022:71122): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928865.022:71123): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928865.024:71124): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495270 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928865.053:71125): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928865.053:71126): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928865.068:71127): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928865.068:71128): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928865.069:71129): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495284 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928865.132:71130): pid=495299 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928865.132:71131): pid=495299 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796A6E7669736D79766876636C657379736E77756A70696F6F656B7779676B61203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383836342E3930363436342D36323431372D3135343032333837393839393437322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928865.133:71132): pid=495299 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928865.136:71133): pid=495299 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928869.577:71134): prog-id=2527 op=LOAD type=SYSCALL msg=audit(1764928869.577:71134): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffce3b43f50 a2=90 a3=9500000000 items=0 ppid=495658 pid=495659 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928869.577:71134): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653039363165356130343166386663626561646639393830363634323466 type=BPF msg=audit(1764928869.631:71135): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928870.057:71136): prog-id=2528 op=LOAD type=SYSCALL msg=audit(1764928870.057:71136): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc7b28dc50 a2=90 a3=9500000001 items=0 ppid=495698 pid=495699 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928870.057:71136): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383334633038313630386233373732646536623237366266386463323662 type=BPF msg=audit(1764928871.013:71137): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928871.149:71138): pid=495299 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928871.149:71139): pid=495299 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928871.156:71140): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928871.156:71141): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928871.168:71142): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928871.168:71143): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928871.171:71144): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495739 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928871.205:71145): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928871.206:71146): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928871.299:71147): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928871.299:71148): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928871.300:71149): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495753 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928871.332:71150): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928871.332:71151): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928871.346:71152): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928871.346:71153): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928871.348:71154): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495766 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928871.388:71155): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928871.388:71156): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928871.407:71157): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928871.407:71158): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928871.409:71159): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495785 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928871.459:71160): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928871.459:71161): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928871.475:71162): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928871.475:71163): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928871.477:71164): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495798 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928871.510:71165): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928871.510:71166): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928871.530:71167): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928871.530:71168): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928871.532:71169): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495812 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928871.779:71170): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928871.779:71171): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928871.796:71172): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928871.796:71173): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928871.800:71174): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495828 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928871.840:71175): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928871.840:71176): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928871.853:71177): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928871.853:71178): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928871.855:71179): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495841 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928871.889:71180): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928871.889:71181): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928871.906:71182): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928871.906:71183): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928871.909:71184): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495855 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928871.956:71185): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928871.956:71186): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928871.972:71187): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928871.972:71188): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928871.974:71189): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495868 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_START msg=audit(1764928872.018:71190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928872.028:71191): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928872.028:71192): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928872.043:71193): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928872.043:71194): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928872.045:71195): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495888 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928872.166:71196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764928872.263:71197): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928872.263:71198): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928872.278:71199): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928872.278:71200): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928872.280:71201): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495916 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928872.312:71202): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928872.312:71203): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928872.358:71204): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928872.358:71205): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928872.360:71206): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495930 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928872.387:71207): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928872.387:71208): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928872.401:71209): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928872.401:71210): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928872.402:71211): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495943 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928872.440:71212): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928872.440:71213): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928872.460:71214): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928872.460:71215): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928872.462:71216): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495962 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928872.508:71217): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928872.508:71218): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928872.521:71219): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928872.521:71220): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928872.523:71221): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495975 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928872.556:71222): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928872.556:71223): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928872.570:71224): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928872.570:71225): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928872.572:71226): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=495989 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928872.647:71227): pid=496004 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928872.647:71228): pid=496004 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67797862676C6F676C66736F6477646E6E6B77666276746471766F6161726168203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383837322E333838393434362D36323434362D3233383433333136333134343739332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928872.648:71229): pid=496004 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928872.655:71230): pid=496004 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRYPTO_SESSION msg=audit(1764928874.187:71231): pid=494825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=494826 suid=74 rport=60274 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928874.187:71232): pid=494825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=494826 suid=74 rport=60274 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928874.196:71233): pid=494825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=494826 suid=74 rport=60274 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928874.196:71234): pid=494825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494826 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928874.197:71235): pid=494825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=494825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928874.197:71236): pid=494825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928875.473:71237): pid=496239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928875.724:71238): pid=496231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=496239 suid=74 rport=29088 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928875.724:71239): pid=496231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=496239 suid=74 rport=29088 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1764928877.003:71240): prog-id=2529 op=LOAD type=SYSCALL msg=audit(1764928877.003:71240): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffb13720a0 a2=90 a3=9500000000 items=0 ppid=496392 pid=496393 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928877.003:71240): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326533356435376334636537613638623761663635363132316630333966 type=BPF msg=audit(1764928877.055:71241): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1764928877.088:71242): pid=496231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=496239 suid=74 rport=29088 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928877.089:71243): pid=496231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496239 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928877.091:71244): pid=496231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928877.091:71245): pid=496231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928877.091:71246): pid=496231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1764928877.470:71247): prog-id=2530 op=LOAD type=SYSCALL msg=audit(1764928877.470:71247): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffa04e2370 a2=90 a3=9500000001 items=0 ppid=496433 pid=496434 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928877.470:71247): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613032353236323931616639383461393962353331633439373262666530 type=BPF msg=audit(1764928877.928:71248): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928878.087:71249): pid=496004 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928878.087:71250): pid=496004 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928878.094:71251): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928878.094:71252): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928878.107:71253): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928878.107:71254): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928878.108:71255): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496473 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928878.140:71256): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928878.140:71257): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928878.283:71258): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928878.283:71259): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928878.285:71260): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496487 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928878.310:71261): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928878.310:71262): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928878.323:71263): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928878.323:71264): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928878.324:71265): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496500 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928878.357:71266): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928878.357:71267): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928878.380:71268): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928878.380:71269): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928878.382:71270): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496519 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928878.422:71271): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928878.422:71272): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928878.435:71273): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928878.435:71274): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928878.437:71275): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496532 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928878.469:71276): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928878.469:71277): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928878.486:71278): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928878.486:71279): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928878.488:71280): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496546 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928878.703:71281): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928878.703:71282): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928878.719:71283): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928878.719:71284): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928878.721:71285): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496562 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928878.761:71286): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928878.761:71287): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928878.776:71288): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928878.776:71289): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928878.777:71290): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496575 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928878.807:71291): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928878.807:71292): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928878.829:71293): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928878.829:71294): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928878.831:71295): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496589 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928878.875:71296): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928878.875:71297): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928878.890:71298): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928878.890:71299): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928878.892:71300): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496602 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928878.927:71301): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928878.927:71302): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928878.941:71303): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928878.941:71304): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928878.943:71305): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496616 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928879.158:71306): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928879.158:71307): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928879.172:71308): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928879.172:71309): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928879.174:71310): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496632 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928879.206:71311): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928879.206:71312): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928879.255:71313): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928879.255:71314): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928879.256:71315): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496646 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928879.289:71316): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928879.289:71317): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928879.305:71318): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928879.305:71319): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928879.306:71320): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496659 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928879.347:71321): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928879.347:71322): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928879.366:71323): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928879.366:71324): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928879.367:71325): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496678 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928879.416:71326): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928879.416:71327): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928879.433:71328): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928879.433:71329): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928879.434:71330): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496691 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928879.467:71331): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928879.467:71332): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928879.482:71333): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928879.482:71334): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928879.483:71335): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=496705 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928879.555:71336): pid=496720 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928879.555:71337): pid=496720 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73776E74776B736F77736E6770777664677467667A72647A6D6C64796D626863203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383837392E323931353131382D36323437352D3235373538383137323732303335392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928879.557:71338): pid=496720 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928879.573:71339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764928879.577:71340): pid=496720 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_STOP msg=audit(1764928879.782:71341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928881.013:71342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928881.017:71343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928881.238:71344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928881.293:71345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928881.304:71346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928881.312:71347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928881.347:71348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928881.583:71349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928881.616:71350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928881.778:71351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928884.240:71352): prog-id=2531 op=LOAD type=SYSCALL msg=audit(1764928884.240:71352): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcb6071480 a2=90 a3=9500000000 items=0 ppid=497249 pid=497250 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928884.240:71352): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333234653438326533353836383865313035363136316162363032343937 type=BPF msg=audit(1764928884.295:71353): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928884.737:71354): prog-id=2532 op=LOAD type=SYSCALL msg=audit(1764928884.737:71354): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffceb5471b0 a2=90 a3=9500000001 items=0 ppid=497290 pid=497291 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928884.737:71354): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663364386661326163643535323235386331376562396261653539316438 type=BPF msg=audit(1764928885.181:71355): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928885.306:71356): pid=496720 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928885.307:71357): pid=496720 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928885.312:71358): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928885.313:71359): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928885.327:71360): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928885.327:71361): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928885.329:71362): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497331 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928885.365:71363): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928885.365:71364): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928885.461:71365): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928885.461:71366): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928885.462:71367): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497345 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928885.496:71368): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928885.496:71369): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928885.512:71370): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928885.512:71371): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928885.514:71372): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497358 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928885.553:71373): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928885.554:71374): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928885.585:71375): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928885.585:71376): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928885.586:71377): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497377 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928885.631:71378): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928885.631:71379): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928885.645:71380): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928885.645:71381): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928885.646:71382): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497390 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928885.674:71383): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928885.675:71384): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928885.691:71385): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928885.691:71386): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928885.694:71387): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497404 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928885.900:71388): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928885.900:71389): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928885.919:71390): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928885.920:71391): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928885.921:71392): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497420 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928885.957:71393): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928885.957:71394): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928885.972:71395): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928885.973:71396): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928885.974:71397): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497433 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928886.001:71398): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928886.001:71399): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928886.020:71400): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928886.020:71401): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928886.022:71402): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497447 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928886.076:71403): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928886.076:71404): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928886.094:71405): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928886.094:71406): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928886.096:71407): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497460 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928886.130:71408): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928886.130:71409): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928886.144:71410): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928886.145:71411): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928886.146:71412): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497474 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928886.404:71413): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928886.404:71414): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928886.419:71415): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928886.419:71416): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928886.421:71417): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497490 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928886.458:71418): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928886.459:71419): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928886.523:71420): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928886.523:71421): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928886.525:71422): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497504 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928886.559:71423): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928886.559:71424): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928886.572:71425): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928886.572:71426): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928886.574:71427): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497517 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928886.613:71428): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928886.614:71429): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928886.636:71430): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928886.636:71431): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928886.638:71432): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497536 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928886.677:71433): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928886.677:71434): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928886.689:71435): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928886.689:71436): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928886.691:71437): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497549 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928886.725:71438): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928886.725:71439): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928886.738:71440): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928886.738:71441): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928886.740:71442): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=497563 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928886.813:71443): pid=497578 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928886.813:71444): pid=497578 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76777475666271746270646E757672696C61786D6E6D6E6C76796D73796F676C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383838362E353632333639332D36323530322D3233373837303835393133343837332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928886.814:71445): pid=497578 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928886.822:71446): pid=497578 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=SERVICE_START msg=audit(1764928891.021:71447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928891.263:71448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928891.374:71449): prog-id=2533 op=LOAD type=SYSCALL msg=audit(1764928891.374:71449): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeb8907100 a2=90 a3=9500000000 items=0 ppid=497962 pid=497963 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928891.374:71449): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633761623936363535363131623431393935346535373566353564653637 type=BPF msg=audit(1764928891.432:71450): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928891.817:71451): prog-id=2534 op=LOAD type=SYSCALL msg=audit(1764928891.817:71451): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc97580a00 a2=90 a3=9500000001 items=0 ppid=498005 pid=498006 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928891.817:71451): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313831623462376530633532353466643130643030376230313832663135 type=BPF msg=audit(1764928892.250:71452): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928892.414:71453): pid=497578 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928892.415:71454): pid=497578 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928892.422:71455): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928892.422:71456): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928892.435:71457): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928892.435:71458): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928892.437:71459): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498046 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928892.470:71460): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928892.470:71461): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928892.651:71462): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928892.651:71463): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928892.653:71464): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498060 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928892.686:71465): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928892.686:71466): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928892.701:71467): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928892.701:71468): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928892.703:71469): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498073 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928892.740:71470): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928892.741:71471): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928892.766:71472): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928892.766:71473): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928892.767:71474): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498092 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928892.817:71475): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928892.817:71476): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928892.830:71477): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928892.830:71478): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928892.831:71479): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498105 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928892.863:71480): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928892.864:71481): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928892.879:71482): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928892.879:71483): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928892.881:71484): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498119 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928893.146:71485): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928893.146:71486): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928893.162:71487): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928893.163:71488): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928893.164:71489): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498135 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928893.206:71490): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928893.206:71491): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928893.220:71492): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928893.221:71493): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928893.222:71494): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498148 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928893.254:71495): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928893.254:71496): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928893.271:71497): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928893.271:71498): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928893.273:71499): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498162 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928893.318:71500): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928893.318:71501): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928893.332:71502): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928893.332:71503): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928893.334:71504): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498175 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928893.369:71505): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928893.369:71506): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928893.384:71507): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928893.384:71508): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928893.386:71509): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498189 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928893.605:71510): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928893.606:71511): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928893.619:71512): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928893.619:71513): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928893.621:71514): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498205 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928893.656:71515): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928893.656:71516): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928893.698:71517): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928893.699:71518): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928893.700:71519): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498219 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928893.724:71520): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928893.724:71521): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928893.737:71522): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928893.738:71523): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928893.739:71524): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498232 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928893.768:71525): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928893.769:71526): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928893.787:71527): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928893.787:71528): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928893.789:71529): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498251 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928893.834:71530): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928893.834:71531): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928893.846:71532): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928893.846:71533): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928893.848:71534): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498264 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928893.878:71535): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928893.878:71536): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928893.890:71537): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928893.890:71538): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928893.892:71539): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498278 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928893.957:71540): pid=498293 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928893.957:71541): pid=498293 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626D7679616D706F6D61646F636F766872666A72796F736478626B7165706B70203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383839332E373236353333372D36323533332D3135303934383333333935303631312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928893.958:71542): pid=498293 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928893.965:71543): pid=498293 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928898.258:71544): prog-id=2535 op=LOAD type=SYSCALL msg=audit(1764928898.258:71544): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcf9922cb0 a2=90 a3=9500000000 items=0 ppid=498655 pid=498656 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928898.258:71544): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313036316437633434306538366634336239643965393866356439343831 type=BPF msg=audit(1764928898.314:71545): prog-id=0 op=UNLOAD type=BPF msg=audit(1764928898.757:71546): prog-id=2536 op=LOAD type=SYSCALL msg=audit(1764928898.757:71546): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffcda67c6b0 a2=90 a3=9500000001 items=0 ppid=498696 pid=498697 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928898.757:71546): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306330666132623336663564303361363865313865663731336463616432 type=BPF msg=audit(1764928899.288:71547): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928899.446:71548): pid=498293 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928899.447:71549): pid=498293 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928899.452:71550): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928899.452:71551): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928899.466:71552): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928899.466:71553): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928899.468:71554): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498737 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928899.504:71555): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928899.504:71556): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928899.664:71557): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928899.664:71558): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928899.665:71559): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498751 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928899.697:71560): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928899.697:71561): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928899.712:71562): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928899.712:71563): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928899.714:71564): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498764 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928899.752:71565): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928899.752:71566): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928899.815:71567): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928899.816:71568): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928899.817:71569): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498783 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928899.867:71570): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928899.867:71571): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928899.888:71572): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928899.888:71573): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928899.890:71574): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498796 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928899.924:71575): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928899.924:71576): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928899.938:71577): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928899.939:71578): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928899.940:71579): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498810 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928900.146:71580): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928900.146:71581): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928900.166:71582): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928900.166:71583): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928900.168:71584): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498826 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928900.205:71585): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928900.205:71586): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928900.230:71587): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928900.230:71588): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928900.232:71589): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498839 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928900.263:71590): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928900.263:71591): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928900.287:71592): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928900.287:71593): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928900.289:71594): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498853 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928900.333:71595): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928900.333:71596): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928900.352:71597): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928900.352:71598): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928900.354:71599): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498866 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928900.386:71600): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928900.386:71601): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928900.404:71602): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928900.404:71603): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928900.406:71604): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498880 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928900.576:71605): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928900.576:71606): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928900.596:71607): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928900.596:71608): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928900.598:71609): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498896 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928900.627:71610): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928900.627:71611): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928900.900:71612): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928900.900:71613): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928900.902:71614): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498910 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928900.936:71615): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928900.936:71616): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928900.952:71617): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928900.952:71618): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928900.954:71619): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498923 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928900.998:71620): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928900.998:71621): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928901.018:71622): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928901.019:71623): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928901.020:71624): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498942 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928901.070:71625): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928901.070:71626): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928901.089:71627): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928901.089:71628): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928901.091:71629): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498955 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928901.127:71630): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928901.127:71631): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928901.143:71632): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928901.143:71633): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928901.145:71634): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=498969 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_ACCT msg=audit(1764928901.198:71635): pid=498984 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_CMD msg=audit(1764928901.199:71636): pid=498984 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D70776768626A6D7A696874636671676A7464667075746577626B6B6F6D7863203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736343932383930302E393338393235352D36323537322D3232333734393130353631383236332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_REFR msg=audit(1764928901.199:71637): pid=498984 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_START msg=audit(1764928901.205:71638): pid=498984 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=BPF msg=audit(1764928901.522:71639): prog-id=2537 op=LOAD type=SYSCALL msg=audit(1764928901.522:71639): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda54323a0 a2=90 a3=9500000000 items=0 ppid=499002 pid=499003 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764928901.522:71639): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623530613863623133356166343236373835363239313663316562333965 type=SERVICE_START msg=audit(1764928903.015:71640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928903.187:71641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1764928905.061:71642): prog-id=0 op=UNLOAD type=USER_END msg=audit(1764928905.198:71643): pid=498984 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928905.199:71644): pid=498984 uid=1003 auid=1003 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin" type=USER_END msg=audit(1764928905.205:71645): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928905.205:71646): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGIN msg=audit(1764928905.222:71647): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_START msg=audit(1764928905.222:71648): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928905.225:71649): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499061 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928905.265:71650): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=USER_LOGOUT msg=audit(1764928905.265:71651): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin" type=SERVICE_START msg=audit(1764928910.014:71652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928910.274:71653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928912.016:71654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928912.020:71655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928912.024:71656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928912.028:71657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928912.032:71658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928912.296:71659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928912.328:71660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928912.342:71661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928912.374:71662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928912.486:71663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928916.000:71664): pid=499075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764928922.014:71665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928922.270:71666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928924.129:71667): pid=499246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499246 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764928925.614:71668): pid=499274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499274 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928925.879:71669): pid=499273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=499274 suid=74 rport=60542 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928925.879:71670): pid=499273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=499274 suid=74 rport=60542 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928928.062:71671): pid=499273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499274 suid=74 rport=60542 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928928.063:71672): pid=499273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499274 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928928.064:71673): pid=499273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928928.065:71674): pid=499273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928928.065:71675): pid=499273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928931.259:71676): pid=499276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764928934.012:71677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928934.137:71678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928941.017:71679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928941.302:71680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928943.018:71681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928943.021:71682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928943.025:71683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928943.029:71684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928943.033:71685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928943.352:71686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928943.389:71687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928943.404:71688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928943.428:71689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928943.502:71690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928953.016:71691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928953.260:71692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764928953.557:71693): pid=499275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=499276 suid=74 rport=26865 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=49.47.217.138 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928953.557:71694): pid=499275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=499276 suid=74 rport=26865 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=49.47.217.138 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928953.559:71695): pid=499275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499276 suid=74 rport=26865 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=49.47.217.138 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928953.560:71696): pid=499275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499276 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928953.560:71697): pid=499275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499275 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928953.561:71698): pid=499275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=49.47.217.138 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928957.417:71699): pid=499531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928957.419:71700): pid=499530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=499531 suid=74 rport=43956 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928957.419:71701): pid=499530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=499531 suid=74 rport=43956 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928958.500:71702): pid=499533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764928958.518:71703): pid=499536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928958.579:71704): pid=499532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=499533 suid=74 rport=42138 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928958.579:71705): pid=499532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=499533 suid=74 rport=42138 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928958.767:71706): pid=499534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=499536 suid=74 rport=25616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928958.767:71707): pid=499534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=499536 suid=74 rport=25616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928958.924:71708): pid=499532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499533 suid=74 rport=42138 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928958.924:71709): pid=499532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499533 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928958.925:71710): pid=499532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928958.926:71711): pid=499532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928958.926:71712): pid=499532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928959.058:71713): pid=499530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499531 suid=74 rport=43956 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928959.059:71714): pid=499530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499531 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928959.059:71715): pid=499530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928959.060:71716): pid=499530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928959.060:71717): pid=499530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928959.524:71718): pid=499538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928959.525:71719): pid=499537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=499538 suid=74 rport=43968 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928959.525:71720): pid=499537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=499538 suid=74 rport=43968 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928960.117:71721): pid=499534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499536 suid=74 rport=25616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928960.118:71722): pid=499534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499536 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928960.119:71723): pid=499534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928960.120:71724): pid=499534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928960.120:71725): pid=499534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928961.267:71726): pid=499537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499538 suid=74 rport=43968 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928961.267:71727): pid=499537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499538 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928961.267:71728): pid=499537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928961.268:71729): pid=499537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928961.268:71730): pid=499537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928961.753:71731): pid=499544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928961.754:71732): pid=499542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=499544 suid=74 rport=43978 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928961.754:71733): pid=499542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=499544 suid=74 rport=43978 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928963.672:71734): pid=499542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499544 suid=74 rport=43978 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928963.673:71735): pid=499542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499544 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928963.673:71736): pid=499542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928963.674:71737): pid=499542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928963.674:71738): pid=499542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928964.116:71739): pid=499546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499546 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928964.117:71740): pid=499545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=499546 suid=74 rport=44000 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928964.118:71741): pid=499545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=499546 suid=74 rport=44000 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764928965.007:71742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928965.146:71743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928965.320:71744): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=467889 suid=1003 rport=59630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928965.321:71745): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467889 suid=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1764928965.323:71746): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1764928965.323:71747): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1764928965.324:71748): pid=467869 uid=0 auid=1003 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=467869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764928965.755:71749): pid=499545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499546 suid=74 rport=44000 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928965.755:71750): pid=499545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499546 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928965.756:71751): pid=499545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928965.757:71752): pid=499545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928965.757:71753): pid=499545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928966.210:71754): pid=499564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499564 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764928966.212:71755): pid=499563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=499564 suid=74 rport=64218 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764928966.212:71756): pid=499563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=499564 suid=74 rport=64218 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928967.845:71757): pid=499563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499564 suid=74 rport=64218 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764928967.845:71758): pid=499563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499564 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764928967.846:71759): pid=499563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764928967.847:71760): pid=499563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764928967.847:71761): pid=499563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928972.010:71762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928972.284:71763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928974.018:71764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928974.022:71765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928974.027:71766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928974.032:71767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928974.037:71768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928974.252:71769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928974.371:71770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928974.377:71771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928974.412:71772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928974.427:71773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928975.513:71774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928975.540:71775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928984.012:71776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928984.201:71777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764928996.015:71778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764928996.175:71779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929003.011:71780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929003.278:71781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929005.020:71782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929005.025:71783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929005.029:71784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929005.033:71785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929005.037:71786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929005.165:71787): pid=499915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1764929005.225:71788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929005.367:71789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764929005.427:71790): pid=499911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=499915 suid=74 rport=51446 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929005.428:71791): pid=499911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=499915 suid=74 rport=51446 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1764929005.431:71792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929005.449:71793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929005.511:71794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929007.256:71795): pid=499911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499915 suid=74 rport=51446 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929007.256:71796): pid=499911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499915 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929007.257:71797): pid=499911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929007.258:71798): pid=499911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929007.258:71799): pid=499911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929011.661:71800): pid=499989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929014.890:71801): pid=499988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=499989 suid=74 rport=58408 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929014.890:71802): pid=499988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=499989 suid=74 rport=58408 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929015.009:71803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929015.196:71804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929016.545:71805): pid=499988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499989 suid=74 rport=58408 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929016.546:71806): pid=499988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499989 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929016.547:71807): pid=499988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.163.234 addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929016.547:71808): pid=499988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=499988 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929016.547:71809): pid=499988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929025.566:71810): pid=500021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929025.674:71811): pid=500020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=500021 suid=74 rport=52392 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.19.117.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929025.674:71812): pid=500020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=500021 suid=74 rport=52392 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.19.117.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929027.012:71813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929027.157:71814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929034.006:71815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929034.235:71816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929035.542:71817): pid=500020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=500021 suid=74 rport=52392 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.19.117.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929035.543:71818): pid=500020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500021 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929035.544:71819): pid=500020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=139.19.117.129 addr=139.19.117.129 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929035.545:71820): pid=500020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929035.545:71821): pid=500020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=139.19.117.129 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929035.567:71822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929035.572:71823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929035.578:71824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929035.583:71825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929035.589:71826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929035.867:71827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929035.891:71828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929035.918:71829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929035.995:71830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929036.110:71831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929039.063:71832): pid=500217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500217 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929039.316:71833): pid=500216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=500217 suid=74 rport=55008 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929039.316:71834): pid=500216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=500217 suid=74 rport=55008 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929040.693:71835): pid=500216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=500217 suid=74 rport=55008 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929040.694:71836): pid=500216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500217 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929040.695:71837): pid=500216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929040.695:71838): pid=500216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929040.695:71839): pid=500216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929041.569:71840): pid=500040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929046.006:71841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929046.171:71842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929057.400:71843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929057.526:71844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929065.017:71845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929065.247:71846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929066.013:71847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929066.017:71848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929066.021:71849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929066.025:71850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929066.139:71851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929066.322:71852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929066.366:71853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929066.433:71854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929066.441:71855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929066.641:71856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929068.001:71857): pid=500295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929076.512:71858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929076.708:71859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929082.588:71860): pid=500501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929082.668:71861): pid=500500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=500501 suid=74 rport=49546 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929082.668:71862): pid=500500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=500501 suid=74 rport=49546 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929083.015:71863): pid=500500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=500501 suid=74 rport=49546 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929083.015:71864): pid=500500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500501 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929083.016:71865): pid=500500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929083.016:71866): pid=500500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929083.016:71867): pid=500500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929083.071:71868): pid=500503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929083.337:71869): pid=500502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=500503 suid=74 rport=34708 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929083.337:71870): pid=500502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=500503 suid=74 rport=34708 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929086.890:71871): pid=500502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=500503 suid=74 rport=34708 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929086.890:71872): pid=500502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500503 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929086.891:71873): pid=500502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929086.892:71874): pid=500502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929086.892:71875): pid=500502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929088.020:71876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929088.148:71877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929096.013:71878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929096.247:71879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929097.014:71880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929097.017:71881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929097.020:71882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929097.023:71883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929097.026:71884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929097.292:71885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929097.339:71886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929097.408:71887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929097.429:71888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929097.438:71889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929107.009:71890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929107.172:71891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929119.013:71892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929119.124:71893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929119.413:71894): pid=500781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500781 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929119.660:71895): pid=500780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=500781 suid=74 rport=39168 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929119.660:71896): pid=500780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=500781 suid=74 rport=39168 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929121.005:71897): pid=500780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=500781 suid=74 rport=39168 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929121.006:71898): pid=500780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500781 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929121.007:71899): pid=500780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929121.007:71900): pid=500780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=500780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929121.007:71901): pid=500780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929127.018:71902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929127.216:71903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929128.011:71904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929128.015:71905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929128.019:71906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929128.023:71907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929128.028:71908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929128.337:71909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929128.357:71910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929128.459:71911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929128.509:71912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929128.714:71913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929138.009:71914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929138.245:71915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929150.009:71916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929150.145:71917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929158.012:71918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929158.232:71919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929159.015:71920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929159.019:71921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929159.024:71922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929159.029:71923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929159.033:71924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929159.304:71925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929159.361:71926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929159.367:71927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929159.387:71928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929159.434:71929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929165.323:71930): pid=501208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764929165.379:71931): pid=501210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929165.567:71932): pid=501207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=501208 suid=74 rport=46588 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929165.567:71933): pid=501207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=501208 suid=74 rport=46588 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929165.642:71934): pid=501209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=501210 suid=74 rport=45648 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929165.643:71935): pid=501209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=501210 suid=74 rport=45648 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929167.072:71936): pid=501209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=501210 suid=74 rport=45648 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929167.072:71937): pid=501209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501210 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929167.072:71938): pid=501209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929167.073:71939): pid=501209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929167.073:71940): pid=501209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929167.520:71941): pid=501207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=501208 suid=74 rport=46588 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929167.521:71942): pid=501207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501208 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929167.521:71943): pid=501207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.163.234 addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929167.522:71944): pid=501207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929167.522:71945): pid=501207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929169.017:71946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929169.189:71947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929180.258:71948): pid=501272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929180.369:71949): pid=501271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=501272 suid=74 rport=55052 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929180.370:71950): pid=501271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=501272 suid=74 rport=55052 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929180.741:71951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929180.841:71952): pid=501271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=501272 suid=74 rport=55052 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929180.841:71953): pid=501271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501272 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929180.842:71954): pid=501271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=78.128.112.74 addr=78.128.112.74 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929180.843:71955): pid=501271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929180.843:71956): pid=501271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929180.873:71957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929189.008:71958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929189.235:71959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929190.020:71960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929190.024:71961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929190.028:71962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929190.032:71963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929190.035:71964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929190.382:71965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929190.445:71966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929190.455:71967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929190.468:71968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929190.581:71969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929200.009:71970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929200.168:71971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929205.080:71972): pid=501489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929205.332:71973): pid=501488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=501489 suid=74 rport=28822 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929205.333:71974): pid=501488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=501489 suid=74 rport=28822 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929206.698:71975): pid=501488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=501489 suid=74 rport=28822 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929206.698:71976): pid=501488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501489 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929206.699:71977): pid=501488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929206.700:71978): pid=501488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501488 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929206.700:71979): pid=501488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929209.185:71980): pid=501492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929209.412:71981): pid=501491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=501492 suid=74 rport=49896 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929209.413:71982): pid=501491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=501492 suid=74 rport=49896 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929210.307:71983): pid=501494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929210.382:71984): pid=501493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=501494 suid=74 rport=36118 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929210.382:71985): pid=501493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=501494 suid=74 rport=36118 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929210.711:71986): pid=501493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=501494 suid=74 rport=36118 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929210.711:71987): pid=501493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501494 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929210.712:71988): pid=501493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929210.713:71989): pid=501493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929210.713:71990): pid=501493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929211.014:71991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929211.153:71992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929220.012:71993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929220.277:71994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929221.011:71995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929221.015:71996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929221.020:71997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929221.023:71998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929221.028:71999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929221.278:72000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929221.299:72001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929221.325:72002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929221.349:72003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929221.441:72004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929231.013:72005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929231.139:72006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929237.025:72007): pid=501694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501694 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929242.019:72008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929242.165:72009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929246.383:72010): pid=501776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929246.645:72011): pid=501775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=501776 suid=74 rport=46858 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929246.645:72012): pid=501775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=501776 suid=74 rport=46858 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929247.840:72013): pid=501722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764929248.065:72014): pid=501775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=501776 suid=74 rport=46858 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929248.065:72015): pid=501775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501776 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929248.066:72016): pid=501775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929248.067:72017): pid=501775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929248.067:72018): pid=501775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929251.012:72019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929251.240:72020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929252.017:72021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929252.020:72022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929252.024:72023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929252.028:72024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929252.032:72025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929252.331:72026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929252.377:72027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929252.394:72028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929252.428:72029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929252.486:72030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929258.656:72031): pid=501777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929262.005:72032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929262.196:72033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929269.728:72034): pid=501961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929273.008:72035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929273.141:72036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929275.360:72037): pid=501989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764929280.607:72038): pid=501990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=501990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764929281.075:72039): pid=502015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929281.077:72040): pid=502014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502015 suid=74 rport=36090 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929281.077:72041): pid=502014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502015 suid=74 rport=36090 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929282.008:72042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929282.185:72043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929283.021:72044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929283.025:72045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929283.029:72046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929283.034:72047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929283.038:72048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929283.245:72049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929283.340:72050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929283.366:72051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929283.398:72052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929283.578:72053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929288.003:72054): pid=502193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929288.254:72055): pid=502192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502193 suid=74 rport=56648 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929288.254:72056): pid=502192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502193 suid=74 rport=56648 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929289.618:72057): pid=502192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=502193 suid=74 rport=56648 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929289.619:72058): pid=502192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502193 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929289.619:72059): pid=502192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929289.620:72060): pid=502192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502192 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929289.620:72061): pid=502192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929291.745:72062): pid=502016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929293.008:72063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929293.148:72064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929303.585:72065): pid=502219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929304.012:72066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929304.170:72067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929313.012:72068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929313.275:72069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929313.280:72070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929313.365:72071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929313.370:72072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929313.479:72073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929313.527:72074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929313.698:72075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929313.702:72076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929313.742:72077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929313.878:72078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929314.116:72079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929315.488:72080): pid=502272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764929321.750:72081): pid=502456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929321.995:72082): pid=502455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502456 suid=74 rport=48468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929321.995:72083): pid=502455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502456 suid=74 rport=48468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929324.020:72084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929324.043:72085): pid=502464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1764929324.220:72086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764929324.305:72087): pid=502458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502464 suid=74 rport=36898 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929324.305:72088): pid=502458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502464 suid=74 rport=36898 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929325.719:72089): pid=502458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=502464 suid=74 rport=36898 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929325.719:72090): pid=502458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502464 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929325.720:72091): pid=502458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929325.721:72092): pid=502458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929325.721:72093): pid=502458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929326.560:72094): pid=502454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764929329.493:72095): pid=502455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=502456 suid=74 rport=48468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929329.493:72096): pid=502455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502456 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929329.494:72097): pid=502455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929329.494:72098): pid=502455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=101.47.163.234 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929335.013:72099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929335.150:72100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929340.170:72101): pid=502509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929340.257:72102): pid=502508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=502509 suid=74 rport=46112 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929340.257:72103): pid=502508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=502509 suid=74 rport=46112 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929340.589:72104): pid=502508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=502509 suid=74 rport=46112 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929340.590:72105): pid=502508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502509 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929340.590:72106): pid=502508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929340.591:72107): pid=502508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929340.591:72108): pid=502508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929344.014:72109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929344.017:72110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929344.021:72111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929344.024:72112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929344.027:72113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929344.196:72114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929344.266:72115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929344.397:72116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929344.453:72117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929344.575:72118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929344.613:72119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929344.748:72120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929355.020:72121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929355.213:72122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929366.008:72123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929366.133:72124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929368.783:72125): pid=502769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929369.033:72126): pid=502768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502769 suid=74 rport=39022 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929369.033:72127): pid=502768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502769 suid=74 rport=39022 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929369.443:72128): pid=502771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502771 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929369.694:72129): pid=502770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502771 suid=74 rport=42892 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929369.695:72130): pid=502770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502771 suid=74 rport=42892 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929371.054:72131): pid=502770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=502771 suid=74 rport=42892 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929371.054:72132): pid=502770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502771 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929371.055:72133): pid=502770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929371.055:72134): pid=502770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929371.056:72135): pid=502770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929371.480:72136): pid=502768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=502769 suid=74 rport=39022 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929371.480:72137): pid=502768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502769 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929371.481:72138): pid=502768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.216.185 addr=45.78.216.185 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929371.482:72139): pid=502768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929371.482:72140): pid=502768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929375.013:72141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929375.016:72142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929375.020:72143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929375.023:72144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929375.027:72145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929375.031:72146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929375.317:72147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929375.364:72148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929375.380:72149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929375.392:72150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929375.422:72151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929375.479:72152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764929382.907:72153): pid=502941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1764929382.907:72154): pid=502941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2E636F6E662E64202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E64656661756C74202D2D707269767365705F736F636B5F70617468202F746D702F746D7068357862733273652F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1764929382.908:72155): pid=502941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764929382.909:72156): pid=502941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1764929383.501:72157): pid=502941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1764929383.501:72158): pid=502941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929386.017:72159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929386.141:72160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929397.008:72161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929397.143:72162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929397.441:72163): pid=502995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929397.705:72164): pid=502994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502995 suid=74 rport=47616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929397.705:72165): pid=502994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=502995 suid=74 rport=47616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929399.150:72166): pid=502994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=502995 suid=74 rport=47616 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929399.150:72167): pid=502994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502995 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929399.151:72168): pid=502994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929399.151:72169): pid=502994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=502994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929399.152:72170): pid=502994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929406.013:72171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929406.017:72172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929406.021:72173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929406.025:72174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929406.029:72175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929406.033:72176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929406.434:72177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929406.447:72178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929406.457:72179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929406.482:72180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929406.501:72181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929406.679:72182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929417.009:72183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929417.158:72184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929428.018:72185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929428.172:72186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929428.221:72187): pid=503252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929428.270:72188): pid=503251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=503252 suid=74 rport=44716 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929428.270:72189): pid=503251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=503252 suid=74 rport=44716 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929428.627:72190): pid=503251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503252 suid=74 rport=44716 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929428.628:72191): pid=503251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503252 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929428.629:72192): pid=503251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929428.630:72193): pid=503251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929428.630:72194): pid=503251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929433.568:72195): pid=503231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929436.698:72196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929436.701:72197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929436.704:72198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929436.706:72199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929436.709:72200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929436.712:72201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929436.982:72202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929436.987:72203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929437.020:72204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929437.040:72205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929437.096:72206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929437.108:72207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929448.012:72208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929448.200:72209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929449.244:72210): pid=503448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929449.495:72211): pid=503447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=503448 suid=74 rport=10952 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929449.495:72212): pid=503447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=503448 suid=74 rport=10952 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929450.854:72213): pid=503447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503448 suid=74 rport=10952 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929450.854:72214): pid=503447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503448 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929450.855:72215): pid=503447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929450.856:72216): pid=503447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929450.856:72217): pid=503447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929456.613:72218): pid=503472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929456.942:72219): pid=503471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=503472 suid=74 rport=44514 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929456.942:72220): pid=503471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=503472 suid=74 rport=44514 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929458.812:72221): pid=503471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503472 suid=74 rport=44514 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929458.812:72222): pid=503471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503472 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929458.812:72223): pid=503471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929458.813:72224): pid=503471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929458.813:72225): pid=503471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929458.828:72226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929458.977:72227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929465.547:72228): pid=503496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929465.628:72229): pid=503495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=503496 suid=74 rport=35534 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929465.628:72230): pid=503495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=503496 suid=74 rport=35534 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929465.969:72231): pid=503495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503496 suid=74 rport=35534 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929465.970:72232): pid=503495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503496 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929465.970:72233): pid=503495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929465.971:72234): pid=503495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503495 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929465.971:72235): pid=503495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929467.008:72236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929467.010:72237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929467.092:72238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929467.094:72239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929467.174:72240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929467.177:72241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929467.261:72242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929467.289:72243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929467.343:72244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929467.494:72245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929467.515:72246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929467.546:72247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929471.187:72248): pid=503668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929471.450:72249): pid=503667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=503668 suid=74 rport=38346 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929471.450:72250): pid=503667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=503668 suid=74 rport=38346 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929474.152:72251): pid=503667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503668 suid=74 rport=38346 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929474.152:72252): pid=503667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503668 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929474.153:72253): pid=503667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929474.154:72254): pid=503667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929474.154:72255): pid=503667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929478.599:72256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929478.726:72257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929489.017:72258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929489.156:72259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929495.200:72260): pid=503728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503728 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929498.015:72261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929498.019:72262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929498.022:72263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929498.027:72264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929498.031:72265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929498.035:72266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929498.429:72267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929498.444:72268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929498.468:72269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929498.495:72270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929498.511:72271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929498.515:72272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929509.010:72273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929509.197:72274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929517.644:72275): pid=503945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929517.750:72276): pid=503944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=503945 suid=74 rport=24434 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929517.751:72277): pid=503944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=503945 suid=74 rport=24434 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929518.386:72278): pid=503944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503945 suid=74 rport=24434 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929518.386:72279): pid=503944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503945 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929518.388:72280): pid=503944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929518.388:72281): pid=503944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929518.388:72282): pid=503944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929520.022:72283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929520.132:72284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929525.242:72285): pid=503969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929525.982:72286): pid=503968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=503969 suid=74 rport=39088 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929525.982:72287): pid=503968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=503969 suid=74 rport=39088 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929529.014:72288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929529.018:72289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929529.022:72290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929529.026:72291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929529.030:72292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929529.036:72293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929529.279:72294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929529.343:72295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929529.412:72296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929529.440:72297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929529.483:72298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929529.492:72299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929531.210:72300): pid=503968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503969 suid=74 rport=39088 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929531.211:72301): pid=503968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503969 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929531.212:72302): pid=503968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.112.96.35 addr=114.112.96.35 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929531.212:72303): pid=503968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=503968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929531.212:72304): pid=503968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929533.006:72305): pid=504146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764929533.314:72306): pid=504148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929533.567:72307): pid=504147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504148 suid=74 rport=16442 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929533.567:72308): pid=504147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504148 suid=74 rport=16442 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929534.921:72309): pid=504147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504148 suid=74 rport=16442 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929534.921:72310): pid=504147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504148 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929534.922:72311): pid=504147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929534.922:72312): pid=504147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929534.923:72313): pid=504147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764929536.567:72314): pid=504145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504146 suid=74 rport=47002 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929536.567:72315): pid=504145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504146 suid=74 rport=47002 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929540.014:72316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929540.138:72317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929544.897:72318): pid=504145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504146 suid=74 rport=47002 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929544.897:72319): pid=504145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504146 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929544.898:72320): pid=504145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.112.96.35 addr=114.112.96.35 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929544.900:72321): pid=504145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929544.900:72322): pid=504145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929545.649:72323): pid=504209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929546.435:72324): pid=504208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504209 suid=74 rport=34604 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929546.436:72325): pid=504208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504209 suid=74 rport=34604 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929550.042:72326): pid=504211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929550.307:72327): pid=504210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504211 suid=74 rport=43466 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929550.308:72328): pid=504210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504211 suid=74 rport=43466 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929551.008:72329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929551.018:72330): pid=504208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504209 suid=74 rport=34604 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929551.019:72331): pid=504208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504209 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929551.019:72332): pid=504208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.112.96.35 addr=114.112.96.35 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929551.020:72333): pid=504208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929551.020:72334): pid=504208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=114.112.96.35 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929551.125:72335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929551.741:72336): pid=504210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504211 suid=74 rport=43466 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929551.741:72337): pid=504210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504211 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929551.742:72338): pid=504210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929551.743:72339): pid=504210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929551.743:72340): pid=504210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929555.240:72341): pid=504232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929560.014:72342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929560.019:72343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929560.022:72344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929560.024:72345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929560.026:72346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929560.028:72347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929560.266:72348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929560.307:72349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929560.348:72350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929560.425:72351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929560.475:72352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929560.533:72353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929564.065:72354): pid=504230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929571.014:72355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929571.147:72356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929582.007:72357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929582.152:72358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929591.018:72359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929591.021:72360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929591.025:72361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929591.028:72362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929591.032:72363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929591.035:72364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929591.319:72365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929591.371:72366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929591.384:72367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929591.406:72368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929591.430:72369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929591.497:72370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929596.551:72371): pid=504622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929596.631:72372): pid=504621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=504622 suid=74 rport=37730 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929596.631:72373): pid=504621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=504622 suid=74 rport=37730 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929596.974:72374): pid=504621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504622 suid=74 rport=37730 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929596.975:72375): pid=504621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504622 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929596.976:72376): pid=504621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929596.976:72377): pid=504621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504621 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929596.976:72378): pid=504621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929602.009:72379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929602.153:72380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929613.017:72381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929613.163:72382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929613.478:72383): pid=504701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929613.731:72384): pid=504700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504701 suid=74 rport=9614 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929613.731:72385): pid=504700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504701 suid=74 rport=9614 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929615.100:72386): pid=504700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504701 suid=74 rport=9614 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929615.100:72387): pid=504700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504701 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929615.101:72388): pid=504700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929615.101:72389): pid=504700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929615.101:72390): pid=504700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929619.752:72391): pid=504703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504703 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929619.753:72392): pid=504702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504703 suid=74 rport=34814 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929619.753:72393): pid=504702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504703 suid=74 rport=34814 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929622.022:72394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929622.027:72395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929622.032:72396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929622.037:72397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929622.042:72398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929622.049:72399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929622.076:72400): pid=504702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504703 suid=74 rport=34814 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929622.078:72401): pid=504702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504703 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929622.078:72402): pid=504702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929622.079:72403): pid=504702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929622.079:72404): pid=504702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929622.334:72405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929622.344:72406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929622.358:72407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929622.382:72408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929622.395:72409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929622.435:72410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929622.538:72411): pid=504872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929622.540:72412): pid=504836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504872 suid=74 rport=34156 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929622.540:72413): pid=504836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504872 suid=74 rport=34156 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929624.004:72414): pid=504836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504872 suid=74 rport=34156 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929624.004:72415): pid=504836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504872 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929624.005:72416): pid=504836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929624.005:72417): pid=504836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929624.005:72418): pid=504836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929625.506:72419): pid=504875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504875 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929625.506:72420): pid=504873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504875 suid=74 rport=51794 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929625.507:72421): pid=504873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504875 suid=74 rport=51794 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929627.887:72422): pid=504876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929627.888:72423): pid=504874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504876 suid=74 rport=34182 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929627.888:72424): pid=504874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504876 suid=74 rport=34182 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929628.532:72425): pid=504878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504878 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929628.798:72426): pid=504877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504878 suid=74 rport=40572 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929628.798:72427): pid=504877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504878 suid=74 rport=40572 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929629.887:72428): pid=504874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504876 suid=74 rport=34182 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929629.887:72429): pid=504874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504876 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929629.888:72430): pid=504874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929629.888:72431): pid=504874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929629.888:72432): pid=504874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929630.304:72433): pid=504880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504880 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929630.305:72434): pid=504879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504880 suid=74 rport=34210 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929630.305:72435): pid=504879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504880 suid=74 rport=34210 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929632.221:72436): pid=504877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504878 suid=74 rport=40572 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929632.221:72437): pid=504877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504878 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929632.222:72438): pid=504877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929632.222:72439): pid=504877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929632.222:72440): pid=504877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929632.242:72441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929632.262:72442): pid=504888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929632.309:72443): pid=504882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504888 suid=74 rport=35578 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929632.310:72444): pid=504882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504888 suid=74 rport=35578 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1764929632.488:72445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929632.655:72446): pid=504882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504888 suid=74 rport=35578 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929632.655:72447): pid=504882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504888 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929632.657:72448): pid=504882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929632.658:72449): pid=504882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929632.658:72450): pid=504882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929633.069:72451): pid=504879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504880 suid=74 rport=34210 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929633.070:72452): pid=504879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504880 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929633.071:72453): pid=504879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929633.071:72454): pid=504879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504879 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929633.072:72455): pid=504879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929633.671:72456): pid=504911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929633.672:72457): pid=504910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504911 suid=74 rport=51994 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929633.673:72458): pid=504910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=504911 suid=74 rport=51994 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929634.733:72459): pid=504913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929634.973:72460): pid=504912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504913 suid=74 rport=36660 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929634.974:72461): pid=504912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=504913 suid=74 rport=36660 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929636.334:72462): pid=504910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504911 suid=74 rport=51994 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929636.334:72463): pid=504910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504911 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929636.335:72464): pid=504910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929636.335:72465): pid=504910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929636.335:72466): pid=504910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929644.011:72467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929644.159:72468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929645.702:72469): pid=504912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=504913 suid=74 rport=36660 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929645.703:72470): pid=504912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504913 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929645.703:72471): pid=504912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.216.185 addr=45.78.216.185 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929645.704:72472): pid=504912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=504912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929645.704:72473): pid=504912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929653.017:72474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929653.022:72475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929653.027:72476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929653.032:72477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929653.037:72478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929653.043:72479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929653.277:72480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929653.317:72481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929653.329:72482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929653.363:72483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929653.443:72484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929653.620:72485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929657.444:72486): pid=505104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929657.715:72487): pid=505103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505104 suid=74 rport=35864 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929657.715:72488): pid=505103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505104 suid=74 rport=35864 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929659.408:72489): pid=505103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=505104 suid=74 rport=35864 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929659.408:72490): pid=505103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505104 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929659.408:72491): pid=505103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929659.409:72492): pid=505103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929659.409:72493): pid=505103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929663.017:72494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929663.160:72495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929675.022:72496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929675.152:72497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929684.015:72498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929684.018:72499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929684.021:72500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929684.023:72501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929684.025:72502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929684.029:72503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929684.262:72504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929684.288:72505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929684.304:72506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929684.405:72507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929684.427:72508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929684.605:72509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929692.919:72510): pid=505354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505354 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929693.172:72511): pid=505353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505354 suid=74 rport=18122 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929693.172:72512): pid=505353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505354 suid=74 rport=18122 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929694.037:72513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929694.233:72514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929694.547:72515): pid=505353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=505354 suid=74 rport=18122 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929694.547:72516): pid=505353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505354 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929694.548:72517): pid=505353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929694.548:72518): pid=505353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929694.548:72519): pid=505353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929703.905:72520): pid=505355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505355 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764929704.534:72521): pid=505382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505382 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929704.797:72522): pid=505381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505382 suid=74 rport=59076 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929704.797:72523): pid=505381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505382 suid=74 rport=59076 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929705.947:72524): pid=505384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505384 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929705.989:72525): pid=505383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505384 suid=74 rport=60476 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929705.990:72526): pid=505383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505384 suid=74 rport=60476 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929706.012:72527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929706.163:72528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929706.219:72529): pid=505381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=505382 suid=74 rport=59076 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929706.219:72530): pid=505381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505382 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929706.221:72531): pid=505381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929706.221:72532): pid=505381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505381 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929706.221:72533): pid=505381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929706.310:72534): pid=505383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=505384 suid=74 rport=60476 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929706.311:72535): pid=505383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505384 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929706.312:72536): pid=505383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929706.312:72537): pid=505383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929706.312:72538): pid=505383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929715.022:72539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929715.026:72540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929715.030:72541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929715.036:72542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929715.041:72543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929715.048:72544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929715.275:72545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929715.327:72546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929715.361:72547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929715.423:72548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929715.437:72549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929715.544:72550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929725.011:72551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929725.183:72552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929728.106:72553): pid=505643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929728.184:72554): pid=505642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=505643 suid=74 rport=53816 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929728.185:72555): pid=505642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=505643 suid=74 rport=53816 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929728.546:72556): pid=505642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=505643 suid=74 rport=53816 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929728.546:72557): pid=505642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505643 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929728.547:72558): pid=505642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929728.548:72559): pid=505642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929728.548:72560): pid=505642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929736.942:72561): pid=505645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929737.014:72562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929737.151:72563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764929737.303:72564): pid=505644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505645 suid=74 rport=34092 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929737.303:72565): pid=505644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505645 suid=74 rport=34092 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929739.131:72566): pid=505644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=505645 suid=74 rport=34092 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929739.131:72567): pid=505644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505645 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929739.132:72568): pid=505644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929739.132:72569): pid=505644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929739.132:72570): pid=505644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929746.014:72571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929746.019:72572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929746.022:72573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929746.026:72574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929746.030:72575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929746.033:72576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929746.261:72577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929746.297:72578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929746.401:72579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929746.447:72580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929746.519:72581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929746.550:72582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929756.020:72583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929756.172:72584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929768.013:72585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929768.131:72586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929768.717:72587): pid=505909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929768.965:72588): pid=505908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505909 suid=74 rport=46478 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929768.965:72589): pid=505908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505909 suid=74 rport=46478 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929770.309:72590): pid=505908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=505909 suid=74 rport=46478 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929770.309:72591): pid=505908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505909 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929770.310:72592): pid=505908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929770.310:72593): pid=505908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929770.310:72594): pid=505908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929773.224:72595): pid=505914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929773.271:72596): pid=505913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505914 suid=74 rport=57630 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929773.271:72597): pid=505913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=505914 suid=74 rport=57630 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929773.619:72598): pid=505913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=505914 suid=74 rport=57630 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929773.620:72599): pid=505913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505914 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929773.620:72600): pid=505913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929773.621:72601): pid=505913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=505913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929773.621:72602): pid=505913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929777.020:72603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929777.025:72604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929777.029:72605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929777.034:72606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929777.038:72607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929777.043:72608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929777.336:72609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929777.399:72610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929777.417:72611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929777.436:72612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929777.468:72613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929777.550:72614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929781.404:72615): pid=506125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506125 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929781.669:72616): pid=506124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506125 suid=74 rport=40426 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929781.669:72617): pid=506124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506125 suid=74 rport=40426 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929783.868:72618): pid=506124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=506125 suid=74 rport=40426 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929783.869:72619): pid=506124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506125 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929783.869:72620): pid=506124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929783.870:72621): pid=506124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929783.870:72622): pid=506124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929787.012:72623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929787.217:72624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929799.014:72625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929799.161:72626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929808.011:72627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929808.015:72628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929808.019:72629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929808.023:72630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929808.027:72631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929808.031:72632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929808.205:72633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929808.249:72634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929808.374:72635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929808.393:72636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929808.400:72637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929808.463:72638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929815.256:72639): pid=506344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929815.613:72640): pid=506343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506344 suid=74 rport=60544 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929815.614:72641): pid=506343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506344 suid=74 rport=60544 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929817.506:72642): pid=506343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=506344 suid=74 rport=60544 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929817.507:72643): pid=506343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506344 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929817.507:72644): pid=506343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929817.508:72645): pid=506343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929817.508:72646): pid=506343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929817.524:72647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929817.689:72648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929830.011:72649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929830.133:72650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929831.625:72651): pid=506389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929831.627:72652): pid=506388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506389 suid=74 rport=38640 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929831.627:72653): pid=506388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506389 suid=74 rport=38640 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=218.0.56.78 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764929839.019:72654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929839.019:72655): pid=506397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764929839.022:72656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929839.026:72657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929839.030:72658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929839.035:72659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929839.041:72660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764929839.055:72661): pid=506395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506397 suid=74 rport=36824 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929839.056:72662): pid=506395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506397 suid=74 rport=36824 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1764929839.293:72663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929839.363:72664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929839.377:72665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929839.381:72666): pid=506395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=506397 suid=74 rport=36824 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929839.382:72667): pid=506395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506397 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929839.382:72668): pid=506395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929839.382:72669): pid=506395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929839.382:72670): pid=506395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929839.392:72671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929839.499:72672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929839.634:72673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929848.011:72674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929848.166:72675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929848.382:72676): pid=506628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929848.635:72677): pid=506627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506628 suid=74 rport=10936 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929848.635:72678): pid=506627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506628 suid=74 rport=10936 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929850.011:72679): pid=506627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=506628 suid=74 rport=10936 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929850.012:72680): pid=506627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506628 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929850.013:72681): pid=506627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929850.013:72682): pid=506627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929850.013:72683): pid=506627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929854.792:72684): pid=506636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929854.871:72685): pid=506635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=506636 suid=74 rport=42062 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929854.871:72686): pid=506635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=506636 suid=74 rport=42062 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929855.212:72687): pid=506635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=506636 suid=74 rport=42062 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929855.212:72688): pid=506635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506636 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929855.213:72689): pid=506635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929855.213:72690): pid=506635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929855.214:72691): pid=506635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929856.276:72692): pid=506638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929856.538:72693): pid=506637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506638 suid=74 rport=37164 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929856.538:72694): pid=506637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506638 suid=74 rport=37164 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929857.962:72695): pid=506637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=506638 suid=74 rport=37164 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929857.962:72696): pid=506637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506638 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929857.962:72697): pid=506637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929857.963:72698): pid=506637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929857.963:72699): pid=506637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929861.013:72700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929861.159:72701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929870.013:72702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929870.017:72703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929870.021:72704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929870.024:72705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929870.028:72706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929870.032:72707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929870.298:72708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929870.329:72709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929870.402:72710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929870.428:72711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929870.459:72712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929870.470:72713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929879.011:72714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929879.194:72715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929892.011:72716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929892.124:72717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929892.865:72718): pid=506874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929893.230:72719): pid=506873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506874 suid=74 rport=58764 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929893.231:72720): pid=506873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=506874 suid=74 rport=58764 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929895.001:72721): pid=506873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=506874 suid=74 rport=58764 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929895.001:72722): pid=506873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506874 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929895.002:72723): pid=506873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929895.003:72724): pid=506873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=506873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929895.003:72725): pid=506873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929901.021:72726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929901.024:72727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929901.028:72728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929901.031:72729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929901.035:72730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929901.039:72731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929901.313:72732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929901.322:72733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929901.370:72734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929901.380:72735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929901.408:72736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929901.429:72737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929906.476:72738): pid=507087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929906.518:72739): pid=507086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507087 suid=74 rport=59554 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929906.518:72740): pid=507086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507087 suid=74 rport=59554 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929906.839:72741): pid=507086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507087 suid=74 rport=59554 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929906.840:72742): pid=507086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507087 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929906.840:72743): pid=507086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929906.841:72744): pid=507086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929906.841:72745): pid=507086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929910.008:72746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929910.185:72747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929923.010:72748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929923.110:72749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929932.011:72750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929932.015:72751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929932.019:72752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929932.023:72753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929932.026:72754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929932.029:72755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929932.246:72756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929932.371:72757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929932.382:72758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929932.442:72759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929932.453:72760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929932.533:72761): pid=507297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1764929932.661:72762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929933.005:72763): pid=507306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507306 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929933.254:72764): pid=507305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507306 suid=74 rport=65314 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929933.254:72765): pid=507305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507306 suid=74 rport=65314 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929934.604:72766): pid=507305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507306 suid=74 rport=65314 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929934.604:72767): pid=507305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507306 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929934.605:72768): pid=507305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929934.606:72769): pid=507305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929934.606:72770): pid=507305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929935.717:72771): pid=507309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929935.984:72772): pid=507308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507309 suid=74 rport=34086 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929935.984:72773): pid=507308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507309 suid=74 rport=34086 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929938.094:72774): pid=507308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507309 suid=74 rport=34086 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929938.094:72775): pid=507308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507309 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929938.095:72776): pid=507308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929938.096:72777): pid=507308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929938.096:72778): pid=507308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764929939.221:72779): pid=507296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507297 suid=74 rport=51220 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929939.221:72780): pid=507296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507297 suid=74 rport=51220 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929939.231:72781): pid=507296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507297 suid=74 rport=51220 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929939.232:72782): pid=507296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507297 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929939.233:72783): pid=507296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929939.234:72784): pid=507296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929941.006:72785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929941.201:72786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929954.007:72787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929954.150:72788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929963.013:72789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929963.016:72790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929963.021:72791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929963.025:72792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929963.030:72793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929963.034:72794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929963.263:72795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929963.297:72796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929963.326:72797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929963.408:72798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929963.414:72799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929963.435:72800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929972.012:72801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929972.204:72802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929972.321:72803): pid=507594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929972.363:72804): pid=507593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507594 suid=74 rport=44978 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929972.363:72805): pid=507593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507594 suid=74 rport=44978 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929972.686:72806): pid=507593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507594 suid=74 rport=44978 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929972.686:72807): pid=507593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507594 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929972.687:72808): pid=507593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929972.687:72809): pid=507593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929972.687:72810): pid=507593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929974.482:72811): pid=507596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764929974.849:72812): pid=507595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507596 suid=74 rport=56982 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929974.849:72813): pid=507595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507596 suid=74 rport=56982 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929976.645:72814): pid=507595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507596 suid=74 rport=56982 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929976.645:72815): pid=507595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507596 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929976.646:72816): pid=507595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929976.646:72817): pid=507595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929976.647:72818): pid=507595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929985.013:72819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929985.117:72820): pid=507615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1764929985.129:72821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764929985.199:72822): pid=507612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=507615 suid=74 rport=49112 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764929985.199:72823): pid=507612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=507615 suid=74 rport=49112 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929985.540:72824): pid=507612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507615 suid=74 rport=49112 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764929985.541:72825): pid=507612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507615 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764929985.541:72826): pid=507612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764929985.542:72827): pid=507612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764929985.542:72828): pid=507612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929994.011:72829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929994.015:72830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929994.018:72831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929994.022:72832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929994.025:72833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764929994.030:72834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929994.294:72835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929994.346:72836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929994.386:72837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929994.483:72838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929994.504:72839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764929994.537:72840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930003.009:72841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930003.178:72842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930016.017:72843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930016.141:72844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930016.464:72845): pid=507832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930016.711:72846): pid=507831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507832 suid=74 rport=64552 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930016.711:72847): pid=507831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507832 suid=74 rport=64552 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930017.855:72848): pid=507835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764930018.048:72849): pid=507831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507832 suid=74 rport=64552 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930018.048:72850): pid=507831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507832 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930018.049:72851): pid=507831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930018.050:72852): pid=507831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930018.050:72853): pid=507831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764930018.121:72854): pid=507834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507835 suid=74 rport=41286 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930018.121:72855): pid=507834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=507835 suid=74 rport=41286 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930021.596:72856): pid=507834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507835 suid=74 rport=41286 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930021.596:72857): pid=507834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507835 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930021.597:72858): pid=507834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930021.598:72859): pid=507834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=507834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930021.598:72860): pid=507834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930025.021:72861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930025.025:72862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930025.031:72863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930025.036:72864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930025.041:72865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930025.046:72866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930025.264:72867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930025.329:72868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930025.333:72869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930025.373:72870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930025.422:72871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930025.430:72872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930034.016:72873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930034.192:72874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930040.958:72875): pid=508075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930041.006:72876): pid=508074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508075 suid=74 rport=56190 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930041.006:72877): pid=508074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508075 suid=74 rport=56190 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930041.356:72878): pid=508074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508075 suid=74 rport=56190 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930041.356:72879): pid=508074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508075 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930041.356:72880): pid=508074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930041.357:72881): pid=508074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930041.357:72882): pid=508074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930046.111:72883): pid=508073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764930047.014:72884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930047.177:72885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930050.607:72886): pid=508097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930050.963:72887): pid=508096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508097 suid=74 rport=55200 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930050.963:72888): pid=508096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508097 suid=74 rport=55200 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930052.831:72889): pid=508096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508097 suid=74 rport=55200 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930052.832:72890): pid=508096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508097 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930052.833:72891): pid=508096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930052.834:72892): pid=508096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930052.834:72893): pid=508096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930056.029:72894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930056.032:72895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930056.035:72896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930056.038:72897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930056.041:72898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930056.045:72899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930056.327:72900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930056.352:72901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930056.384:72902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930056.483:72903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930056.534:72904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930056.573:72905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930065.011:72906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930065.124:72907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930078.007:72908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930078.103:72909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930084.017:72910): pid=508364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930084.273:72911): pid=508363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508364 suid=74 rport=44880 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930084.274:72912): pid=508363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508364 suid=74 rport=44880 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930086.272:72913): pid=508363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508364 suid=74 rport=44880 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930086.273:72914): pid=508363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508364 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930086.274:72915): pid=508363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.216.185 addr=45.78.216.185 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930086.274:72916): pid=508363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930086.274:72917): pid=508363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930087.010:72918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930087.013:72919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930087.016:72920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930087.018:72921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930087.021:72922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930087.023:72923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930087.282:72924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930087.306:72925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930087.405:72926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930087.458:72927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930087.509:72928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930087.610:72929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930096.011:72930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930096.196:72931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930097.735:72932): pid=508571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930097.981:72933): pid=508570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508571 suid=74 rport=59520 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930097.981:72934): pid=508570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508571 suid=74 rport=59520 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930098.364:72935): pid=508573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930098.629:72936): pid=508572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508573 suid=74 rport=60946 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930098.629:72937): pid=508572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508573 suid=74 rport=60946 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930099.954:72938): pid=508570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508571 suid=74 rport=59520 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930099.954:72939): pid=508570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508571 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930099.955:72940): pid=508570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930099.955:72941): pid=508570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930099.955:72942): pid=508570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930101.485:72943): pid=508572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508573 suid=74 rport=60946 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930101.486:72944): pid=508572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508573 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930101.486:72945): pid=508572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930101.487:72946): pid=508572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930101.487:72947): pid=508572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930104.459:72948): pid=508575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930104.508:72949): pid=508574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508575 suid=74 rport=33836 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930104.508:72950): pid=508574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508575 suid=74 rport=33836 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930104.853:72951): pid=508574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508575 suid=74 rport=33836 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930104.854:72952): pid=508574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508575 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930104.854:72953): pid=508574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930104.855:72954): pid=508574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930104.855:72955): pid=508574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930109.014:72956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930109.131:72957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930118.011:72958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930118.015:72959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930118.020:72960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930118.024:72961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930118.028:72962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930118.031:72963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930118.357:72964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930118.367:72965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930118.412:72966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930118.466:72967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930118.497:72968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930118.653:72969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930127.013:72970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930127.151:72971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930127.538:72972): pid=508791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930127.777:72973): pid=508790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508791 suid=74 rport=53418 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930127.778:72974): pid=508790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=508791 suid=74 rport=53418 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930129.090:72975): pid=508790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508791 suid=74 rport=53418 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930129.090:72976): pid=508790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508791 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930129.091:72977): pid=508790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930129.091:72978): pid=508790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=508790 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930129.091:72979): pid=508790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930140.012:72980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930140.143:72981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930149.017:72982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930149.025:72983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930149.027:72984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930149.028:72985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930149.031:72986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930149.033:72987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930149.257:72988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930149.348:72989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930149.391:72990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930149.444:72991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930149.498:72992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930149.547:72993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930158.012:72994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930158.174:72995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930167.945:72996): pid=509054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509054 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930167.993:72997): pid=509053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509054 suid=74 rport=38468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930167.994:72998): pid=509053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509054 suid=74 rport=38468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930168.344:72999): pid=509053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509054 suid=74 rport=38468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930168.344:73000): pid=509053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509054 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930168.345:73001): pid=509053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930168.345:73002): pid=509053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930168.345:73003): pid=509053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930171.009:73004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930171.133:73005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930178.006:73006): pid=509075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930178.274:73007): pid=509074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509075 suid=74 rport=35374 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930178.274:73008): pid=509074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509075 suid=74 rport=35374 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930178.473:73009): pid=509077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930178.724:73010): pid=509076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509077 suid=74 rport=63174 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930178.724:73011): pid=509076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509077 suid=74 rport=63174 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930179.718:73012): pid=509074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509075 suid=74 rport=35374 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930179.718:73013): pid=509074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509075 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930179.719:73014): pid=509074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=27.111.32.174 addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930179.720:73015): pid=509074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930179.720:73016): pid=509074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=27.111.32.174 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930179.740:73017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930179.743:73018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930179.746:73019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930179.749:73020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930179.754:73021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930179.757:73022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930180.037:73023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930180.050:73024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930180.089:73025): pid=509076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509077 suid=74 rport=63174 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930180.089:73026): pid=509076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509077 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930180.089:73027): pid=509076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930180.090:73028): pid=509076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930180.090:73029): pid=509076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930180.150:73030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930180.169:73031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930180.207:73032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930180.326:73033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930185.205:73034): pid=509249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930185.207:73035): pid=509248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=509249 suid=74 rport=39928 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930185.207:73036): pid=509248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=509249 suid=74 rport=39928 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930186.988:73037): pid=509248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509249 suid=74 rport=39928 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930186.989:73038): pid=509248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509249 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930186.990:73039): pid=509248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930186.990:73040): pid=509248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930186.990:73041): pid=509248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930187.772:73042): pid=509251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930187.773:73043): pid=509250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=509251 suid=74 rport=39954 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930187.773:73044): pid=509250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=509251 suid=74 rport=39954 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764930189.012:73045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930189.189:73046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930190.334:73047): pid=509250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509251 suid=74 rport=39954 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930190.335:73048): pid=509250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509251 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930190.336:73049): pid=509250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930190.336:73050): pid=509250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930190.337:73051): pid=509250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930190.847:73052): pid=509279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930190.849:73053): pid=509278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=509279 suid=74 rport=39968 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930190.849:73054): pid=509278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=509279 suid=74 rport=39968 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930192.615:73055): pid=509278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509279 suid=74 rport=39968 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930192.615:73056): pid=509278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509279 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930192.617:73057): pid=509278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930192.617:73058): pid=509278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930192.618:73059): pid=509278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930193.116:73060): pid=509281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509281 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930193.117:73061): pid=509280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=509281 suid=74 rport=38456 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930193.117:73062): pid=509280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=509281 suid=74 rport=38456 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930195.181:73063): pid=509280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509281 suid=74 rport=38456 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930195.182:73064): pid=509280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509281 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930195.183:73065): pid=509280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930195.183:73066): pid=509280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509280 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930195.183:73067): pid=509280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930196.425:73068): pid=509283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930196.426:73069): pid=509282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=509283 suid=74 rport=38466 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930196.427:73070): pid=509282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=509283 suid=74 rport=38466 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930198.655:73071): pid=509282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509283 suid=74 rport=38466 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930198.655:73072): pid=509282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509283 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930198.656:73073): pid=509282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930198.656:73074): pid=509282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509282 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930198.656:73075): pid=509282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930201.931:73076): pid=509319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1764930202.013:73077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930202.167:73078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1764930202.268:73079): pid=509318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509319 suid=74 rport=51636 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930202.268:73080): pid=509318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509319 suid=74 rport=51636 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930204.079:73081): pid=509318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509319 suid=74 rport=51636 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930204.079:73082): pid=509318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509319 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930204.080:73083): pid=509318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930204.081:73084): pid=509318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930204.081:73085): pid=509318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930211.017:73086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930211.020:73087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930211.027:73088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930211.034:73089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930211.040:73090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930211.046:73091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930211.328:73092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930211.351:73093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930211.435:73094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930211.473:73095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930211.579:73096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930211.639:73097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930220.013:73098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930220.153:73099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930230.443:73100): pid=509545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930230.694:73101): pid=509544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509545 suid=74 rport=45472 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930230.694:73102): pid=509544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509545 suid=74 rport=45472 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930231.646:73103): pid=509547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930231.689:73104): pid=509546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509547 suid=74 rport=34114 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930231.689:73105): pid=509546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509547 suid=74 rport=34114 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930232.012:73106): pid=509546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509547 suid=74 rport=34114 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930232.012:73107): pid=509546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509547 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930232.012:73108): pid=509546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930232.013:73109): pid=509546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509546 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930232.013:73110): pid=509546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930233.011:73111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930233.161:73112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930233.520:73113): pid=509544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509545 suid=74 rport=45472 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930233.521:73114): pid=509544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509545 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930233.522:73115): pid=509544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.216.185 addr=45.78.216.185 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930233.523:73116): pid=509544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930233.523:73117): pid=509544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930242.007:73118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930242.009:73119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930242.011:73120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930242.014:73121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930242.016:73122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930242.018:73123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930242.281:73124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930242.297:73125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930242.379:73126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930242.409:73127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930242.436:73128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930242.596:73129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930251.013:73130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930251.213:73131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930260.838:73132): pid=509800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930261.090:73133): pid=509799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509800 suid=74 rport=55184 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930261.091:73134): pid=509799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509800 suid=74 rport=55184 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930262.462:73135): pid=509799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509800 suid=74 rport=55184 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930262.462:73136): pid=509799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509800 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930262.464:73137): pid=509799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.20.16.22 addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930262.464:73138): pid=509799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930262.464:73139): pid=509799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=125.20.16.22 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930264.013:73140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930264.128:73141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930273.011:73142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930273.015:73143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930273.020:73144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930273.024:73145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930273.028:73146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930273.032:73147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930273.285:73148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930273.341:73149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930273.440:73150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930273.551:73151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930273.573:73152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930273.608:73153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930275.261:73154): pid=509996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930275.504:73155): pid=509995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509996 suid=74 rport=49852 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930275.504:73156): pid=509995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=509996 suid=74 rport=49852 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930276.819:73157): pid=509995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=509996 suid=74 rport=49852 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930276.819:73158): pid=509995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509996 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930276.820:73159): pid=509995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930276.821:73160): pid=509995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=509995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930276.821:73161): pid=509995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930282.008:73162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930282.177:73163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930295.008:73164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930295.159:73165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930296.055:73166): pid=510043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930296.097:73167): pid=510042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=510043 suid=74 rport=44812 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930296.097:73168): pid=510042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=510043 suid=74 rport=44812 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930296.421:73169): pid=510042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510043 suid=74 rport=44812 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930296.422:73170): pid=510042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510043 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930296.423:73171): pid=510042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930296.424:73172): pid=510042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930296.424:73173): pid=510042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930304.023:73174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930304.026:73175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930304.030:73176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930304.034:73177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930304.038:73178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930304.042:73179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930304.372:73180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930304.391:73181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930304.409:73182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930304.438:73183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930304.485:73184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930304.509:73185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930313.011:73186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930313.164:73187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930326.008:73188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930326.108:73189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930335.016:73190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930335.020:73191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930335.023:73192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930335.026:73193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930335.030:73194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930335.033:73195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930335.341:73196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930335.358:73197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930335.385:73198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930335.411:73199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930335.438:73200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930335.553:73201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930344.008:73202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930344.231:73203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930350.825:73204): pid=510494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930351.064:73205): pid=510493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=510494 suid=74 rport=48070 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930351.064:73206): pid=510493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=510494 suid=74 rport=48070 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930352.423:73207): pid=510493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510494 suid=74 rport=48070 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930352.423:73208): pid=510493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510494 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930352.423:73209): pid=510493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930352.424:73210): pid=510493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930352.424:73211): pid=510493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930357.009:73212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930357.158:73213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930365.564:73214): pid=510537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930365.612:73215): pid=510536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=510537 suid=74 rport=38918 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930365.612:73216): pid=510536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=510537 suid=74 rport=38918 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930365.961:73217): pid=510536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510537 suid=74 rport=38918 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930365.961:73218): pid=510536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510537 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930365.962:73219): pid=510536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930365.962:73220): pid=510536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930365.962:73221): pid=510536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930365.980:73222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930365.984:73223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930365.987:73224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930365.991:73225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930365.995:73226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930366.000:73227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930366.310:73228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930366.321:73229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930366.359:73230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930366.414:73231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930366.443:73232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930366.498:73233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930375.013:73234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930375.193:73235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930379.223:73236): pid=510741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930379.476:73237): pid=510740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=510741 suid=74 rport=40602 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930379.476:73238): pid=510740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=510741 suid=74 rport=40602 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930383.004:73239): pid=510740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510741 suid=74 rport=40602 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930383.006:73240): pid=510740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510741 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930383.006:73241): pid=510740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.78.216.185 addr=45.78.216.185 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930383.006:73242): pid=510740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930383.006:73243): pid=510740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.78.216.185 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930388.009:73244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930388.147:73245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930397.012:73246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930397.016:73247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930397.018:73248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930397.020:73249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930397.023:73250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930397.026:73251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930397.289:73252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930397.363:73253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930397.432:73254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930397.472:73255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930397.482:73256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930397.529:73257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930397.812:73258): pid=510969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930397.813:73259): pid=510955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=510969 suid=74 rport=22432 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930397.813:73260): pid=510955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=510969 suid=74 rport=22432 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930400.021:73261): pid=510955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510969 suid=74 rport=22432 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930400.021:73262): pid=510955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510969 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930400.022:73263): pid=510955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930400.022:73264): pid=510955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930400.022:73265): pid=510955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930400.594:73266): pid=510972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930400.596:73267): pid=510971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=510972 suid=74 rport=22446 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930400.596:73268): pid=510971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=510972 suid=74 rport=22446 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930401.978:73269): pid=510971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510972 suid=74 rport=22446 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930401.978:73270): pid=510971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510972 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930401.979:73271): pid=510971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930401.980:73272): pid=510971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930401.980:73273): pid=510971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930402.294:73274): pid=510974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930402.295:73275): pid=510973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=510974 suid=74 rport=22450 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930402.295:73276): pid=510973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=510974 suid=74 rport=22450 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930403.591:73277): pid=510973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510974 suid=74 rport=22450 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930403.591:73278): pid=510973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510974 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930403.591:73279): pid=510973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930403.592:73280): pid=510973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930403.592:73281): pid=510973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930403.834:73282): pid=510976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930403.943:73283): pid=510975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=510976 suid=74 rport=22460 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930403.943:73284): pid=510975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=510976 suid=74 rport=22460 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930404.828:73285): pid=510975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510976 suid=74 rport=22460 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930404.828:73286): pid=510975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510976 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930404.829:73287): pid=510975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930404.829:73288): pid=510975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930404.830:73289): pid=510975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930405.426:73290): pid=510978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930405.427:73291): pid=510977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=510978 suid=74 rport=28732 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930405.427:73292): pid=510977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256@libssh.org spid=510978 suid=74 rport=28732 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1764930406.011:73293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930406.133:73294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930407.348:73295): pid=510977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510978 suid=74 rport=28732 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930407.348:73296): pid=510977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510978 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930407.349:73297): pid=510977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930407.349:73298): pid=510977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=510977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930407.349:73299): pid=510977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930419.007:73300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930419.156:73301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930428.017:73302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930428.020:73303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930428.026:73304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930428.030:73305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930428.035:73306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930428.041:73307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930428.418:73308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930428.435:73309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930428.450:73310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930428.477:73311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930428.513:73312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930428.538:73313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930431.367:73314): pid=511196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930431.727:73315): pid=511195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=511196 suid=74 rport=46290 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930431.727:73316): pid=511195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=511196 suid=74 rport=46290 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930433.233:73317): pid=511198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930433.276:73318): pid=511197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=511198 suid=74 rport=52920 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930433.276:73319): pid=511197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=511198 suid=74 rport=52920 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930433.506:73320): pid=511195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=511196 suid=74 rport=46290 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930433.506:73321): pid=511195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511196 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930433.508:73322): pid=511195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.232.44 addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930433.509:73323): pid=511195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930433.509:73324): pid=511195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.232.44 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930433.594:73325): pid=511197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=511198 suid=74 rport=52920 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1764930433.595:73326): pid=511197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511198 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1764930433.595:73327): pid=511197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=108.85.73.157 addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930433.596:73328): pid=511197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1764930433.596:73329): pid=511197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=108.85.73.157 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930437.016:73330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930437.228:73331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930450.008:73332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930450.127:73333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930459.013:73334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930459.017:73335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930459.020:73336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930459.025:73337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930459.028:73338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930459.032:73339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930459.348:73340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=729c63b42e1c38dc12e3c2d6078271c1fb7a0c46098a53f28018e8a8aa933d30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930459.372:73341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8af7e356904db9c17482fec99046d879a13a4c361ed5b50ad43c7df1769315f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930459.383:73342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37392d8a02818127f64b25c01dbd47ae89efa55924677e128e4ac93da199f30e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930459.440:73343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6aea51bfe56f082d6c1d116e1a74fa198adc40b161f83e138455edc285d14e64 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930459.491:73344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4beb86606cb7ac0a7af1d6f2c3df696d0ebd83c4faff91797af526b9cae3d431 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930459.496:73345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=54e6f217a8c1692d13856a300e4c4b170db294f05a909b94277eb0442fe02374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930462.370:73346): pid=511278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_KEY_USER msg=audit(1764930463.159:73347): pid=511459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930463.160:73348): pid=511458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=511459 suid=74 rport=49468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930463.161:73349): pid=511458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=511459 suid=74 rport=49468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1764930463.221:73350): pid=511458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1764930463.234:73351): pid=511458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930463.234:73352): pid=511458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5d:f5:28:43:c1:ce:d9:fe:fd:db:bd:89:9e:0e:5e:69:1c:b2:7e:10:3c:5c:36:4b:50:86:57:31:8b:3e:6d:e5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764930463.268:73353): pid=511458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930463.269:73354): pid=511458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=511459 suid=74 rport=49468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1764930463.271:73355): pid=511458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764930463.271:73356): pid=511458 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=248 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1764930463.271:73356): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd4471c1f0 a2=4 a3=3e8 items=0 ppid=410121 pid=511458 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=248 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764930463.271:73356): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1764930463.272:73357): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_ACCT msg=audit(1764930463.338:73358): pid=511461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1764930463.338:73359): pid=511461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1764930463.339:73360): pid=511461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764930463.339:73361): pid=511461 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=249 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1764930463.339:73361): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd083a2f50 a2=4 a3=3e8 items=0 ppid=1 pid=511461 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=249 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764930463.339:73361): proctitle="(systemd)" type=USER_START msg=audit(1764930463.342:73362): pid=511461 uid=0 auid=1000 ses=249 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1764930463.489:73363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764930463.508:73364): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764930463.510:73365): pid=511477 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511477 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1764930463.511:73366): pid=511477 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1764930463.556:73367): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764930463.556:73368): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764930463.558:73369): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511478 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764930463.602:73370): pid=511491 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764930463.603:73371): pid=511491 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7276777271746D6761716F677477617579716266727A696C6763637866696478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764930463.604:73372): pid=511491 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764930463.609:73373): pid=511491 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764930464.048:73374): pid=511491 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1764930464.049:73375): pid=511491 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1764930464.051:73376): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1764930464.051:73377): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=SERVICE_START msg=audit(1764930468.015:73378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930468.208:73379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=947f1db0f703fdb649b3436814a934bb98d4300102785dd594f0d43fd88f93eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930469.338:73380): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=511477 suid=1000 rport=49468 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764930469.338:73381): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511477 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1764930469.341:73382): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1764930469.342:73383): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764930469.342:73384): pid=511458 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=SERVICE_STOP msg=audit(1764930479.510:73385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1764930481.013:73386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1764930481.125:73387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=57a962ea8901cdd1b47cb5c69263497d1789718289ea8e620b36e2bb86d2afd1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930485.409:73388): pid=511541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1764930485.409:73389): pid=511540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=511541 suid=74 rport=48160 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1764930485.409:73390): pid=511540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=511541 suid=74 rport=48160 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1764930485.642:73391): pid=511540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1764930485.666:73392): pid=511540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930485.666:73393): pid=511540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5d:f5:28:43:c1:ce:d9:fe:fd:db:bd:89:9e:0e:5e:69:1c:b2:7e:10:3c:5c:36:4b:50:86:57:31:8b:3e:6d:e5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1764930485.693:73394): pid=511540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1764930485.697:73395): pid=511540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=511541 suid=74 rport=48160 laddr=38.102.83.146 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1764930485.697:73396): pid=511540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764930485.697:73397): pid=511540 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=250 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1764930485.697:73397): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffb8c2c4b0 a2=4 a3=3e8 items=0 ppid=410121 pid=511540 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764930485.697:73397): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1764930485.697:73398): pid=511540 uid=0 auid=1000 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_ACCT msg=audit(1764930486.008:73399): pid=511543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1764930486.008:73400): pid=511543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1764930486.009:73401): pid=511543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1764930486.010:73402): pid=511543 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=251 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1764930486.010:73402): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd083a2f50 a2=4 a3=3e8 items=0 ppid=1 pid=511543 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=251 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1764930486.010:73402): proctitle="(systemd)" type=USER_START msg=audit(1764930486.012:73403): pid=511543 uid=0 auid=1000 ses=251 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1764930486.160:73404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1764930486.225:73405): pid=511540 uid=0 auid=1000 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1764930486.226:73406): pid=511558 uid=0 auid=1000 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1764930486.227:73407): pid=511558 uid=0 auid=1000 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1764930486.270:73408): pid=511540 uid=0 auid=1000 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1764930486.270:73409): pid=511540 uid=0 auid=1000 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1764930486.272:73410): pid=511540 uid=0 auid=1000 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:ba:2a:e8:32:eb:1a:27:2c:21:fc:b5:64:28:be:1f:c9:f0:af:bc:f7:a9:67:d8:5a:24:e8:ec:4a:b4:2d:f7:a4 direction=? spid=511559 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1764930486.333:73411): pid=511559 uid=1000 auid=1000 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1764930486.333:73412): pid=511559 uid=1000 auid=1000 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1764930486.334:73413): pid=511559 uid=1000 auid=1000 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1764930486.338:73414): pid=511559 uid=1000 auid=1000 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"